skills/solizardking/solana-clawd/agent-auth/Socket

agent-auth

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core purpose is coherent, but the actual data flow is not. The skill’s sample design forwards Clerk session tokens to a third-party relay (x402.wtf), and the referenced bridging package is not verified by the provided evidence. TEE verification via Phala/proof.t16z.com appears legitimate, but the auth-token routing and broadened trust surface make this higher-risk than a normal auth guide.

Confidence: 84%Severity: 76%

Audit Metadata

Analyzed At

Jul 9, 2026, 10:46 PM

Package URL

pkg:socket/skills-sh/Solizardking%2Fsolana-clawd%2Fagent-auth%2F@99110aece84f0bebf653631df14725e290e46c5c982443eb2a7fcfddd0668dba