Bankr Agent - LLM Gateway

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally consistent with a hosted LLM gateway, but its core design routes prompts and auth through Bankr instead of provider-native APIs, and it adds wallet/auto-top-up actions. Official same-publisher docs reduce supply-chain concern, yet the intermediary data flow and credential forwarding make this medium-high risk rather than benign.

Confidence: 88%Severity: 66%
Audit Metadata
Analyzed At
Mar 31, 2026, 02:27 PM
Package URL
pkg:socket/skills-sh/BankrBot%2Fclaude-plugins%2Fbankr-agent-llm-gateway%2F@d9230b55ed2d52371b6685e4ac77a6c3537281b1
Security Audit — socket — Bankr Agent - LLM Gateway