compose-dividend-distribution
Warn
Audited by Socket on Aug 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill's core behavior mostly matches its stated Goldsky Compose deployment purpose and its network endpoints are official Goldsky/Neon services, not obvious exfiltration infrastructure. However, it carries meaningful security risk because it installs external tooling, chains trust through additional skills, centralizes a powerful API key, and enables semi-autonomous on-chain financial actions and public blockchain transactions. This is not confirmed malware, but it is higher-risk than a normal documentation skill.
Confidence: 90%Severity: 72%
Audit Metadata