preflight-github-bounties

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with bounty preflight, but it routes decisions and paid requests through a third-party service discovered from a personal GitHub Pages manifest and enables autonomous wallet spending. Controls are present and there is no clear malware behavior, yet the trust model and financial-action capability make the skill medium risk.

Confidence: 81%Severity: 62%
Audit Metadata
Analyzed At
Jul 20, 2026, 01:40 PM
Package URL
pkg:socket/skills-sh/cristianmoroaica%2Fbountyverdict%2Fpreflight-github-bounties%2F@893d991fe8c75fa5c35f8345717d99787068ccde9adc537a864784c5c182275e
Security Audit — socket — preflight-github-bounties