Paddle
Warn
Audited by Socket on Apr 11, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's Paddle-focused capabilities mostly match its stated purpose and its data flows point to official Paddle endpoints, so it is not overtly malicious. Risk comes from community-published distribution outside Paddle ownership, known ClawHub integrity concerns, local secret storage in agent memory files, and transitive installation of other skills.
Confidence: 87%Severity: 58%
Audit Metadata