erc8004
Warn
Audited by Socket on Oct 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s stated purpose is coherent and the ERC-8004 contracts/site appear legitimate, but the actual `agent-id` executable is not sourced or verified anywhere. Because an unverifiable CLI would receive a raw Ethereum private key and can perform irreversible blockchain actions, this is high security risk even without confirmed malicious behavior.
Confidence: 87%Severity: 84%
Audit Metadata