skills/bankrbot/skills/signa/Socket

signa

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is broadly consistent with its stated purpose, but it centralizes agent messaging/brain/capability traffic through a third-party hosted service and enables real outbound actions via wallet-signed DMs. The biggest risk is indirect prompt injection and unsafe automation of untrusted remote content, not confirmed malware.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Jun 19, 2026, 01:18 PM

Package URL

pkg:socket/skills-sh/BankrBot%2Fskills%2Fsigna%2F@f630003de06540e801d463362a2dccd223fe1eecf287027a6deea3a301d9c335