skills/bankrbot/skills/bankr-communities/Socket

bankr-communities

Warn

Audited by Socket on Aug 16, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s core Bankr API purpose is coherent, but trust is weakened by a non-verifiable install source mismatch with Bankr’s public skill catalog, plus transitive skill-install instructions and public-action capability. Data flows mostly stay on expected Bankr endpoints, so this looks more like a risky/unverified skill than confirmed malware.

Confidence: 88%Severity: 72%

Audit Metadata

Analyzed At

Aug 16, 2026, 10:11 AM

Package URL

pkg:socket/skills-sh/bankrbot%2Fskills%2Fbankr-communities%2F@d7b7f255309101f16c28f9a164850d11e073fbf6763edda65a7aa486e713c9d3