partner-skill-name
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The MoonPay portion is internally consistent and uses MoonPay's documented npm-based CLI and auth flow, but the skill is incomplete and asks for installation/execution of an unspecified partner CLI with unknown provenance and data flows. That unresolved third-party trust gap makes the template high risk until the partner package, publisher relationship, and endpoints are concretely defined.
Confidence: 92%Severity: 78%
Audit Metadata