nipper
Warn
Audited by Socket on Apr 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s core platform/payment functionality is broadly aligned with its stated purpose, but it meaningfully increases risk by enabling autonomous blockchain payments, instructing transitive skill installation, and telling agents to continuously refresh remote instructions. This looks more like a high-risk platform integration than outright malware, but it should not be treated as low-risk documentation.
Confidence: 88%Severity: 82%
Audit Metadata