cli-cast

Warn

Audited by Socket on May 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-aligned and uses the official Foundry `cast` tool, so it is not malware. However, it is a high-risk skill because it can sign and broadcast blockchain transactions, handle private keys, defaults to a third-party RPC relay, and includes a transitive skill-install step. Overall classification: SUSPICIOUS/HIGH RISK but not malicious.

Confidence: 91%Severity: 76%
Audit Metadata
Analyzed At
May 10, 2026, 05:20 AM
Package URL
pkg:socket/skills-sh/paulrberg%2Fagent-skills%2Fcli-cast%2F@b5780ea54e91b0ae27022719a0b5b8b25d0c95f9