bankr

Warn

Audited by Socket on May 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent with its stated Bankr crypto/wallet purpose and uses official-looking Bankr endpoints plus standard npm/Bun installation, so it is not confirmed malware. However it gives an AI agent high-impact financial powers, raw transaction/signing capability, non-interactive execution, and web-browsing context that can influence those actions; this makes it a high-risk skill even though the data flows are mostly coherent.

Confidence: 90%Severity: 87%
Audit Metadata
Analyzed At
May 11, 2026, 09:15 AM
Package URL
pkg:socket/skills-sh/bankrbot%2Fopenclaw-skills%2Fbankr%2F@19f3cb8225e9c633ea2bb96eec4334709a638b8d