Paddle

Warn

Audited by Socket on Apr 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's Paddle-focused capabilities mostly match its stated purpose and its data flows point to official Paddle endpoints, so it is not overtly malicious. Risk comes from community-published distribution outside Paddle ownership, known ClawHub integrity concerns, local secret storage in agent memory files, and transitive installation of other skills.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Apr 11, 2026, 03:58 AM
Package URL
pkg:socket/skills-sh/LJT-520%2FopenClaw-backup%2Fpaddle%2F@082dd6ab511c993ac112b3ac53bf5031b294b1f2
Security Audit — socket — Paddle