preflight-github-bounties
Warn
Audited by Socket on Jul 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is broadly aligned with bounty preflight, but it routes decisions and paid requests through a third-party service discovered from a personal GitHub Pages manifest and enables autonomous wallet spending. Controls are present and there is no clear malware behavior, yet the trust model and financial-action capability make the skill medium risk.
Confidence: 81%Severity: 62%
Audit Metadata