pay-via-agent-wallet

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is coherent with its stated purpose, but it enables autonomous real-money payments through an external CLI and marketplace, including third-party endpoints, which creates meaningful financial and trust-chain risk. Same-org provenance for Circle materials lowers malware concern, but the wallet/payment authority and transitive CLI dependency keep overall security risk in the medium range.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Oct 9, 2026, 10:13 PM
Package URL
pkg:socket/skills-sh/circlefin%2Fskills%2Fpay-via-agent-wallet%2F@73b82da5bec5e14ee43a4b1de61a8d5b82c7ab40f928898f3fbef40d37f3f659