starknet-wallet

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the install and data-flow patterns are largely coherent and use official-looking npm packages and service endpoints, but the skill grants an AI agent direct cryptocurrency transaction powers and explicitly supports autonomous spending via session keys. That high-impact financial autonomy makes the skill high risk even without signs of covert malware or credential theft.

Confidence: 94%Severity: 82%
Audit Metadata
Analyzed At
Oct 15, 2026, 06:51 PM
Package URL
pkg:socket/skills-sh/keep-starknet-strange%2Fstarknet-agentic%2Fstarknet-wallet%2F@2f4fbaef8f3b995f1323b396dc730b0c0dfb80cd877f78b3bcef989c43be03d9