create-paid-skill

Warn

Audited by Socket on Mar 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is largely coherent as a paid-skill authoring guide, and the main library reference appears same-org and plausible. However, it grants broad execution tools, includes transitive skill installation instructions, and normalizes wallet-secret use in external payment tooling, so the overall footprint is riskier than a pure documentation skill.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Mar 16, 2026, 10:13 PM
Package URL
pkg:socket/skills-sh/402md%2Fagent-skills%2Fcreate-paid-skill%2F@d50a6a49485ad7479f3b28023d31d076b3c4f5d4
Security Audit — socket — create-paid-skill