onboarding
Warn
Audited by Socket on Mar 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated onboarding purpose broadly matches the checks and optional registration/check-in, but the skill also installs other skill packs and can enable write-capable finance functionality. The main concerns are transitive skill installation, autonomous external actions, and wallet password handling; no clear evidence of outright credential theft or malicious exfiltration is shown in the provided content.
Confidence: 79%Severity: 68%
Audit Metadata