text-similarity
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The skill is mostly coherent with its stated purpose, but it carries meaningful risk because a basic text-similarity task is coupled to remote client download and blockchain private-key based payment authorization. This looks more suspicious than malicious: the main concerns are supply-chain trust in call.mjs and forwarding a wallet key into payment client logic for a low-level utility service.
Confidence: 82%Severity: 63%
Audit Metadata