skills/mission69b/t2000-skills/t2000-earn/Socket

t2000-earn

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The core marketplace workflow is coherent, but the skill enables autonomous financially consequential actions, requires transitive skill installation, and forwards a third-party API key through an external CLI with unclear t2000/audric/Hermes trust boundaries. This is not confirmed malware, but it carries meaningful security and trust risk.

Confidence: 83%Severity: 76%

Audit Metadata

Analyzed At

Sep 1, 2026, 10:54 AM

Package URL

pkg:socket/skills-sh/mission69b%2Ft2000-skills%2Ft2000-earn%2F@466e2b499661bebf068849c823d6ce047b8a3b6139444f373fef28516554ada7