crow

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's payment capabilities are aligned with its stated purpose, and the main API endpoints appear consistent with CrowPay. However, it grants an AI agent autonomous financial action, forwards payment authorization through a third-party service, and includes a transitive skill installation instruction. High security risk comes from real-world payment autonomy rather than confirmed malware.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Apr 2, 2026, 09:54 AM
Package URL
pkg:socket/skills-sh/elizaOS%2Feliza%2Fcrow%2F@c568578b0f21441831f29f61dace32f46d1bb3e7
Security Audit — socket — crow