scry

Warn

Audited by Socket on Oct 6, 2026

1 alert found:

Security
SecurityMEDIUM
bin/topup-test-wallets.sh

The code appears intended to fund designated test wallets, not to steal data or establish persistence. However, it makes privileged ledger changes and contains a material SQL-injection risk because target values are inserted into SQL without validation. Restrict execution and environment control, and validate targets as bounded nonnegative integers or use parameterized SQL.

Confidence: 98%Severity: 78%
Audit Metadata
Analyzed At
Oct 6, 2026, 09:38 PM
Package URL
pkg:socket/skills-sh/exopriors%2Fskills%2Fscry%2F@446d6a6f2681f669a6c95239a924ce468425a95655d0d15b979794b92c5b3fc1