analytics-pro

Warn

Audited by Socket on Apr 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The analytics purpose is plausible, but the trust chain is weak: the publisher and API are not independently verifiable, while the payment flow depends on third-party 402.md components and forwards an EVM private key to external package logic. Capabilities generally match the stated purpose, but credential forwarding and third-party payment mediation make the skill high risk for sensitive wallet use.

Confidence: 86%Severity: 84%
Audit Metadata
Analyzed At
Apr 20, 2026, 12:48 PM
Package URL
pkg:socket/skills-sh/402md%2Fskillmd%2Fanalytics-pro%2F@bd68b33cc8860957077642390cb25128f369b2b7
Security Audit — socket — analytics-pro