indigo-staking
Warn
Audited by Socket on Mar 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose matches Indigo staking, and Indigo staking itself is a legitimate feature, but the skill enables autonomous on-chain financial actions and relies on an unverified signer reference with unclear provenance. No direct malware or exfiltration is evident from the provided text, yet the unresolved signing-tool trust and real-world transaction capability make this a medium-to-high security risk skill.
Confidence: 82%Severity: 68%
Audit Metadata