onboarding

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated onboarding purpose broadly matches the checks and optional registration/check-in, but the skill also installs other skill packs and can enable write-capable finance functionality. The main concerns are transitive skill installation, autonomous external actions, and wallet password handling; no clear evidence of outright credential theft or malicious exfiltration is shown in the provided content.

Confidence: 79%Severity: 68%
Audit Metadata
Analyzed At
Mar 20, 2026, 11:18 PM
Package URL
pkg:socket/skills-sh/aibtcdev%2Fskills%2Fonboarding%2F@521c34753e1543d7f467d8509c44472c4af94d64