agent-wallet

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-aligned for wallet management and signing, and the install path appears consistent with official BANK OF AI documentation. However, it grants an agent high-impact financial signing capability, instructs collection of wallet passwords in conversation, and allows optional unencrypted runtime secret storage. Overall this is not confirmed malware, but it is a high-risk skill because the requested capabilities and credential handling can directly enable consequential blockchain actions.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Apr 22, 2026, 10:25 AM
Package URL
pkg:socket/skills-sh/BofAI%2Fskills%2Fagent-wallet%2F@255f5a30a7689ae50327bb69a433280bdbfd9fe1
Security Audit — socket — agent-wallet