harness-capu

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
catalog.json

The fragment is a configuration and demonstration for crypto staking and inference-key management, not standalone malware. Its strongest risks are financial transaction execution, reliance on unreviewed external smart-contract/provider infrastructure, unpinned remote skill installation, and deliberate exposure of an API key in chat history. The included setup guidance is largely security-conscious, but the remote repository must be independently reviewed and pinned before installation, and secret display should be avoided where possible.

Confidence: 97%Severity: 62%
Audit Metadata
Analyzed At
Sep 9, 2026, 08:48 AM
Package URL
pkg:socket/skills-sh/bankrbot%2Fskills%2Fharness-capu%2F@a5522a6d5a6fbc50577efcdeb9ebc1d6faafad28c4273a539c40d63e972d97ff
Security Audit — socket — harness-capu