accounts-payable-agent

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s capabilities match its stated AP purpose, and there is no installer, credential harvesting, or hidden exfiltration in the provided text. However, it authorizes an AI agent to autonomously move money across multiple payment rails, including crypto/stablecoins, which is inherently high risk and disproportionate without concrete approval, custody, and provider controls.

Confidence: 92%Severity: 78%
Audit Metadata
Analyzed At
Sep 10, 2026, 07:43 PM
Package URL
pkg:socket/skills-sh/likas07%2Ft3code-skills%2Faccounts-payable-agent%2F@ec87fd69e2ab2b1de6634261bd862c22f719b7df8f18a01510a9955be49ca4ca