skills/bofai/skills/bankofai-guide/Socket

bankofai-guide

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally coherent for BankOfAI onboarding and uses same-org official install sources, so it does not look malicious. However, it introduces transitive trust, installs a wallet CLI, stores wallet secrets locally, and supports financial workflows, making it higher-risk than a normal guide skill.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Sep 14, 2026, 10:06 PM

Package URL

pkg:socket/skills-sh/bofai%2Fskills%2Fbankofai-guide%2F@cc3e90697b4c0c132ee22edb53db09dd41b4f824ec2a5026a31905b54bf42dcd