bnbagent

Warn

Audited by Socket on Jul 19, 2026

1 alert found:

Anomaly
AnomalyLOW
examples/a2a-agent/README.md

This code description outlines a legitimate open-source pattern for an A2A agent with on-chain signing and discovery flows. Security risk is moderate-to-high due to secret management (private keys in env), potential for on-chain funding flows, and reliance on input validation for cryptographic operations. No clear malware is evident, but the design requires rigorous key handling, strict input validation, and secure logging/telemetry to mitigate supply-chain and on-chain tampering risks.

Confidence: 44%Severity: 62%
Audit Metadata
Analyzed At
Jul 19, 2026, 06:16 AM
Package URL
pkg:socket/skills-sh/starchild-ai-agent%2Fofficial-skills%2Fbnbagent%2F@02092a4eb446a18197831ba6b4de98b9adb55c8f649d12898c610155450683f7
Security Audit — socket — bnbagent