skills/jamkris/everything-gemini-code/agent-payment-x402/Socket

agent-payment-x402

Warn

Audited by Socket on Jul 29, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s capabilities match its payment purpose, but it grants agents high-impact financial autonomy and forwards wallet private keys to external package code. The footprint is coherent yet high risk, with notable supply-chain and transitive-trust concerns rather than confirmed malware.

Confidence: 87%Severity: 82%

Audit Metadata

Analyzed At

Jul 29, 2026, 08:20 AM

Package URL

pkg:socket/skills-sh/Jamkris%2Feverything-gemini-code%2Fagent-payment-x402%2F@de0f5e7f6349c415c171ed3b1e89c543a3241c74e6f7cd01d37067056b044d05