pay-via-agent-wallet
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is coherent with its stated purpose, but it enables autonomous real-money payments through an external CLI and marketplace, including third-party endpoints, which creates meaningful financial and trust-chain risk. Same-org provenance for Circle materials lowers malware concern, but the wallet/payment authority and transitive CLI dependency keep overall security risk in the medium range.
Confidence: 86%Severity: 62%
Audit Metadata