send
Warn
Audited by Socket on May 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The stated purpose matches the capability, but the skill grants an AI agent authority to perform cryptocurrency transfers and relies on an unpinned third-party CLI (`npx fibx@latest`) with unclear provenance and network/data handling. That combination creates high security risk even without proof of malicious intent.
Confidence: 85%Severity: 86%
Audit Metadata