cfr-section-text
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is coherent, but the skill relies on remotely fetched executable code and a plaintext blockchain private key for payment. The main concern is install/execution trust and credential exposure to unseen client logic, not confirmed malicious behavior.
Confidence: 84%Severity: 74%
Audit Metadata