crypto-random-bytes
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s core purpose is coherent, but it combines remote code fetch-and-execute with optional forwarding of a wallet private key to that helper for signed payment flows. The data flow is broadly consistent with the stated service, yet the install trust and credential exposure are higher than necessary for a simple random-bytes API.
Confidence: 79%Severity: 68%
Audit Metadata