blockrun

Fail

Audited by Socket on Apr 11, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but its footprint is high risk because it enables autonomous real-money spending, stores and uses a local wallet, and routes user data through a third-party gateway rather than direct official APIs. The PyPI install path is less concerning than the payment autonomy and intermediary data flow.

Confidence: 84%Severity: 81%
Audit Metadata
Analyzed At
Apr 11, 2026, 06:22 PM
Package URL
pkg:socket/skills-sh/AndrewHaward2310%2F.agents%2Fblockrun%2F@169cb5ea4c4c7dbd28eefc212842fca339ea769e
Security Audit — socket — blockrun