near-kit

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s capabilities match a NEAR blockchain SDK, so it is not deceptive, but its scope includes high-impact financial and account-management actions. Supply-chain risk is moderate due to third-party wallet modules and HOT Connect’s remote script loading model; overall risk is elevated by the autonomous transaction capability rather than clear malware behavior.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Sep 28, 2026, 09:14 AM
Package URL
pkg:socket/skills-sh/near%2Fagent-skills%2Fnear-kit%2F@e8423dd394e9e15bb888fad7abc4b8a887da6d2cd27ab8f895e2587be19e6016