indigo-staking

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose matches Indigo staking, and Indigo staking itself is a legitimate feature, but the skill enables autonomous on-chain financial actions and relies on an unverified signer reference with unclear provenance. No direct malware or exfiltration is evident from the provided text, yet the unresolved signing-tool trust and real-world transaction capability make this a medium-to-high security risk skill.

Confidence: 82%Severity: 68%
Audit Metadata
Analyzed At
Mar 22, 2026, 01:23 AM
Package URL
pkg:socket/skills-sh/Flux-Point-Studios%2Fcardano-defi-skills%2Findigo-staking%2F@678a68965c5f0e7023019da5502c2cf23c02e9d7