compose-dividend-distribution

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's core behavior mostly matches its stated Goldsky Compose deployment purpose and its network endpoints are official Goldsky/Neon services, not obvious exfiltration infrastructure. However, it carries meaningful security risk because it installs external tooling, chains trust through additional skills, centralizes a powerful API key, and enables semi-autonomous on-chain financial actions and public blockchain transactions. This is not confirmed malware, but it is higher-risk than a normal documentation skill.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Aug 1, 2026, 07:05 PM
Package URL
pkg:socket/skills-sh/goldsky-io%2Fgoldsky-agent%2Fcompose-dividend-distribution%2F@caaff929acf122c97382865e54012aec29da763308c1ac783dd5500d68f9b883
Security Audit — socket — compose-dividend-distribution