nft-blockchain

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
references/blockchain-patterns.md

The fragment appears to be legitimate documentation and example code, not malware. It contains no evident exfiltration, persistence, credential theft, sabotage, or obfuscated payload. However, if executed with real addresses and assets, several snippets can initiate transfers, payments, marketplace trades, or broad approvals. Deployments should validate contract and recipient addresses, constrain amounts, avoid unrestricted approvals where possible, and use only trusted signed-request endpoints. The signedFetch example should not be treated as safe for production merely because the endpoint is a placeholder.

Confidence: 98%Severity: 57%
Audit Metadata
Analyzed At
Sep 15, 2026, 08:23 AM
Package URL
pkg:socket/skills-sh/decentraland%2Fsdk-skills%2Fnft-blockchain%2F@8587b6ce8cc6f616fd0783fc8263d24b44c4d27ddb49ee810f8b4623eb3bbc22