skills/mukul975/anthropic-cybersecurity-skills/implementing-zero-knowledge-proof-for-authentication/Socket
implementing-zero-knowledge-proof-for-authentication
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecurityscripts/agent.py
MEDIUMSecurityMEDIUM
scripts/agent.py
No clear malware or supply-chain backdoor is present. The implementation contains a serious authentication flaw because verification fails to recompute the Fiat-Shamir challenge, allowing forged proofs without the private key. It also returns private key material, accepts passwords on the command line, and writes to an unrestricted user-supplied path. The displayed fragment additionally has a syntax error at the final main( call.
Confidence: 99%Severity: 86%
Audit Metadata