cli-cast
Audited by Socket on Oct 10, 2026
2 alerts found:
SecurityAnomalyThis skill is purpose-aligned and mostly well-scoped for Foundry Cast usage, with no clear malware or exfiltration behavior in the provided content. The primary risk is autonomy: it explicitly empowers the agent to carry out real blockchain signing and broadcast actions, including wallet confirmations, after an initial user instruction and while bypassing a coordination gate. That makes it a high-risk but not malicious transaction-execution skill.
The visible fragment documents a potentially high-impact blockchain signing and broadcast workflow, specifically clearing delegation. Its safeguards require explicit approval and verification, and there is no evidence of malware or covert data theft in the fragment. Incorrect or unauthorized use could irreversibly alter account state or spend funds.