agent-wallet
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is purpose-aligned for wallet management and signing, and the install path appears consistent with official BANK OF AI documentation. However, it grants an agent high-impact financial signing capability, instructs collection of wallet passwords in conversation, and allows optional unencrypted runtime secret storage. Overall this is not confirmed malware, but it is a high-risk skill because the requested capabilities and credential handling can directly enable consequential blockchain actions.
Confidence: 86%Severity: 72%
Audit Metadata