nightmarket

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is coherent with a paid API marketplace, but it materially expands agent risk by encouraging broad use for external services, routing data through Nightmarket, enabling autonomous paid actions in USDC, forwarding spend authority to CrowPay, and installing another skill transitively. This looks more like a high-risk marketplace/payment wrapper than a narrowly scoped API integration.

Confidence: 86%Severity: 81%
Audit Metadata
Analyzed At
Apr 2, 2026, 09:54 AM
Package URL
pkg:socket/skills-sh/elizaOS%2Feliza%2Fnightmarket%2F@08b662606283f50f339bfbb2e921043633db7a30