create-wallet
Warn
Audited by Socket on Mar 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s wallet functionality matches its stated purpose, but it combines unpinned remote package execution with financial-action enablement and secret-handling workflows. It is not confirmed malware, yet the install trust and fund-custody footprint are too risky to treat as benign.
Confidence: 84%Severity: 72%
Audit Metadata