@1365/xfree02
Warn
Audited by Socket on Aug 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is coherent, but the skill’s core functionality depends on a transitive x402 skill and routes paid requests through a third-party marketplace rather than Nansen’s standard direct API flow. Real-money wallet use is intentional and disclosed, yet the unverifiable companion setup/payment path and intermediary data flow make this a medium-high security risk rather than benign.
Confidence: 88%Severity: 78%
Audit Metadata