pay-with-app

Warn

Audited by Socket on Oct 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is largely purpose-aligned for APP/X Layer payments and uses official Uniswap/OKX endpoints, but it performs real financial actions, requires direct access to a raw private key, and includes an unpinned runtime install of viem. These are proportionate enough to avoid a malicious verdict, yet sensitive enough to classify as medium risk.

Confidence: 90%Severity: 61%
Audit Metadata
Analyzed At
Oct 28, 2026, 02:26 AM
Package URL
pkg:socket/skills-sh/fuzzystodd%2Fthe-nexus-protocol-token-dao%2Fpay-with-app%2F@5e2015176d8bfbd2e55e786eca4b72b6ba9de01d6666bfb9bd032aa9cfde6d36