use-circle-cli

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core Circle CLI install path is coherent and vendor-aligned, but the skill is unusually broad, enables autonomous onchain/financial actions, includes low-transparency background feedback behavior, and introduces transitive skill installation/update trust. Not confirmed malware, but medium risk due to autonomy and trust-chain expansion beyond a simple CLI guide.

Confidence: 88%Severity: 61%
Audit Metadata
Analyzed At
Oct 26, 2026, 02:00 AM
Package URL
pkg:socket/skills-sh/fuzzystodd%2Fthe-nexus-protocol-token-dao%2Fuse-circle-cli%2F@3ef811ea63952292d2693cd77792627f943617e9875a0761284516ecc11ac3c7