send
Warn
Audited by Socket on Apr 5, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s stated purpose matches its capabilities, but it enables high-impact crypto transfers and depends on unpinned `npx @latest` execution of third-party code. This is proportionate to the purpose yet still high risk because it combines autonomous financial actions with mutable supply-chain trust.
Confidence: 87%Severity: 82%
Audit Metadata