litcoin-miner

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s core purpose matches its crypto/DeFi capabilities, but it authorizes high-impact financial actions, forwards Bankr and optional AI credentials to external services, and relies on an unpinned third-party PyPI package with limited publisher verification. The biggest integrity issue is that the skill presents active mining/coordinator workflows even though litcoin.app reportedly says the protocol endpoints were discontinued, making the operational claims inconsistent and raising trust concerns. Not confirmed malware, but risky and not appropriate for autonomous use without strong user approval per action.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Sep 24, 2026, 04:46 AM
Package URL
pkg:socket/skills-sh/bankrbot%2Fskills%2Flitcoin-miner%2F@ff3fa55c8104d683260f1b132162cbfd2907f183a48f8c7b2e5f5f374748a59c
Security Audit — socket — litcoin-miner