skills/aibtcdev/skills/zest-auto-repay/Socket

zest-auto-repay

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is purpose-aligned for DeFi liquidation protection and shows no clear credential theft or covert exfiltration, but it grants an AI agent authority to initiate real-money blockchain repayments on mainnet. The main risk is autonomous financial action, not malware; trust depends on verifying the actual TypeScript enforcement logic and the MCP approval boundary.

Confidence: 87%Severity: 79%

Audit Metadata

Analyzed At

Oct 1, 2026, 05:05 AM

Package URL

pkg:socket/skills-sh/aibtcdev%2Fskills%2Fzest-auto-repay%2F@f4b3388b736a70699cb27e652900d12b5c892663e515eef7bf57ca546df25019