text-char-edit
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core text-editing purpose is coherent, but the skill couples it to a remote, unpinned helper script that receives a wallet private key and can authorize real spending. Data flows broadly match the claimed x402 payment model, yet the install and credential-forwarding trust model is disproportionate for a simple text utility.
Confidence: 89%Severity: 84%
Audit Metadata