self-relay-hyperlane-message

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with Hyperlane self-relay operations and uses official Hyperlane data sources, but it has meaningful risk because it forwards a signing key into a locally sourced CLI and can autonomously perform an on-chain transaction. The main concern is execution trust in the local monorepo/CLI path rather than obvious credential theft or deceptive data routing.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
Jun 19, 2026, 04:42 AM
Package URL
pkg:socket/skills-sh/hyperlane-xyz%2Fhyperlane-monorepo%2Fself-relay-hyperlane-message%2F@3ce0c9ddf8042855a4f34185157d2c72e4ab60d4a4f54d4c12ae0fcd2f82bfa5
Security Audit — socket — self-relay-hyperlane-message