naics-lookup
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is coherent, and the service/domain relationship appears internally consistent, but the skill relies on downloading and executing an unverifiable helper script and then passing it a plaintext wallet private key. That combination makes the install/payment path high risk even without direct evidence of malicious exfiltration.
Confidence: 87%Severity: 84%
Audit Metadata