my-skill

Warn

Audited by Socket on May 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is plausible, but its actual data flow is a third-party proxy/payment gateway for multiple major AI providers rather than direct official APIs. The main concern is intermediary routing of prompts/media/payment context and expanded wallet capabilities, not malware or installer behavior.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
May 7, 2026, 07:43 PM
Package URL
pkg:socket/skills-sh/fluxa-agent-payment%2Fskills%2Fmy-skill%2F@c6b10dcf8b63dac537f2ab713e47e20b0c42c48f