alkahest-user

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is purpose-aligned for a crypto escrow CLI, but it gives an AI agent the ability to perform high-impact financial blockchain actions using raw wallet secrets, with optional arbitrary RPC routing and no explicit per-action approval controls. This is not confirmed malware, but it is a high-risk agent skill due to autonomous real-world actions and sensitive credential handling.

Confidence: 86%Severity: 79%
Audit Metadata
Analyzed At
Jul 23, 2026, 04:08 PM
Package URL
pkg:socket/skills-sh/internet-court%2Finternet-court-skill%2Falkahest-user%2F@62566e4402661a617258998d7dfa303e1c62c845b138b8e5b24bf25ad35e07fa