selat-purchasing

Warn

Audited by Socket on Aug 10, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/routed_pay.py

No clear evidence of classic malware (keylogging, cryptomining, backdoors, destructive behavior, or overt data exfiltration) is visible in this fragment. However, the code is security-sensitive: it automates wallet signing via `mm`, proxies requests through a remote router derived from user input, submits a payment authorization signature over the network, and writes payment artifacts to disk. Additionally, `sys.path` is modified before importing `x402ext`, which can increase supply-chain/packaging tampering risk. Overall, treat as potentially dangerous in an untrusted environment and ensure router/module integrity, because abuse would primarily be financial authorization misuse rather than system compromise.

Confidence: 65%Severity: 55%
Audit Metadata
Analyzed At
Aug 10, 2026, 06:40 PM
Package URL
pkg:socket/skills-sh/selat-ai%2Fselat-metamask-skills%2Fselat-purchasing%2F@860815106e666c7faecce0ef97ef601dfcab99bfda65a9e54872d74bba493541
Security Audit — socket — selat-purchasing