solana-wallet

Warn

Audited by Socket on May 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the capabilities mostly match the stated crypto-trading purpose, but the skill is inherently high risk because it grants an AI agent direct authority over financial transactions and public posting using sensitive wallet and X credentials. The main concern is not clear malware evidence, but the combination of autonomous real-world actions, broad account access, and trust in auto-installed repo code without verified data-flow review.

Confidence: 80%Severity: 82%
Audit Metadata
Analyzed At
May 20, 2026, 06:13 AM
Package URL
pkg:socket/skills-sh/npc-live%2Fclawfirm%2Fsolana-wallet%2F@6681fade483dc7e7c2d15ad119274a0128430458
Security Audit — socket — solana-wallet