harness-capu
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalycatalog.json
LOWAnomalyLOW
catalog.json
The fragment is a configuration and demonstration for crypto staking and inference-key management, not standalone malware. Its strongest risks are financial transaction execution, reliance on unreviewed external smart-contract/provider infrastructure, unpinned remote skill installation, and deliberate exposure of an API key in chat history. The included setup guidance is largely security-conscious, but the remote repository must be independently reviewed and pinned before installation, and secret display should be avoided where possible.
Confidence: 97%Severity: 62%
Audit Metadata