alkahest-user
Warn
Audited by Socket on Jul 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is purpose-aligned for a crypto escrow CLI, but it gives an AI agent the ability to perform high-impact financial blockchain actions using raw wallet secrets, with optional arbitrary RPC routing and no explicit per-action approval controls. This is not confirmed malware, but it is a high-risk agent skill due to autonomous real-world actions and sensitive credential handling.
Confidence: 86%Severity: 79%
Audit Metadata