skills/kukapay/crypto-skills/token-minter/Socket

token-minter

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s capabilities broadly match its token-deployment purpose, but it combines real-money/public blockchain actions with unpinned dependency installation and third-party RPC discovery. Main risk is supply-chain and data-routing trust, not confirmed malware.

Confidence: 87%Severity: 68%

Audit Metadata

Analyzed At

Sep 17, 2026, 04:27 PM

Package URL

pkg:socket/skills-sh/kukapay%2Fcrypto-skills%2Ftoken-minter%2F@ae6869ec1651e1e1da20a2a87cbca9742ce8a92b9b146642ffcd290d09d7ba75