starknet-wallet
Warn
Audited by Socket on Oct 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the install and data-flow patterns are largely coherent and use official-looking npm packages and service endpoints, but the skill grants an AI agent direct cryptocurrency transaction powers and explicitly supports autonomous spending via session keys. That high-impact financial autonomy makes the skill high risk even without signs of covert malware or credential theft.
Confidence: 94%Severity: 82%
Audit Metadata