erc8004

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent and the ERC-8004 contracts/site appear legitimate, but the actual `agent-id` executable is not sourced or verified anywhere. Because an unverifiable CLI would receive a raw Ethereum private key and can perform irreversible blockchain actions, this is high security risk even without confirmed malicious behavior.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Oct 19, 2026, 05:19 AM
Package URL
pkg:socket/skills-sh/alsk1992%2Fcloddsbot%2Ferc8004%2F@a1b614cf7accfa3fa76655b4ddfa26806d27ec22d6715261d609249e433f21a4