use-circle-cli
Warn
Audited by Socket on May 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is largely coherent with its stated Circle CLI purpose and uses a plausible official npm package, but it is high risk because it empowers autonomous financial actions, encourages broad fallback activation beyond explicit Circle tasks, and can install/update additional skills. Main concern is dangerous capability scope and transitive trust, not confirmed malware or overt credential theft.
Confidence: 84%Severity: 78%
Audit Metadata