cardano-cli-operator

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s behavior is aligned with its stated purpose as a manual Cardano CLI operator, and installs use mainstream sources. However, it is essentially a raw shell execution gateway that bypasses the model and relies on external approval/allowlist controls; combined with missing wrapper-script contents, this makes the execution surface broader and less verifiable than a narrowly scoped Cardano helper.

Confidence: 88%Severity: 69%
Audit Metadata
Analyzed At
Oct 16, 2026, 11:09 PM
Package URL
pkg:socket/skills-sh/flux-point-studios%2Fcardano-agent-skills%2Fcardano-cli-operator%2F@c03bf4bc52e7c896275bb2f9757d6139050566555cbc89a9da96516f0b8d43a9