layerzero-value-transfer

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core LayerZero API usage matches the stated bridging purpose and uses official endpoints, so this is not a disguised installer or obvious malware. Risk comes from two areas: authenticated traffic is routed through a Starchild proxy rather than directly to LayerZero, and the skill enables autonomous financial actions by signing/sending live cross-chain transfers. Coherent purpose, but elevated trust and transaction risk.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Sep 17, 2026, 04:29 AM
Package URL
pkg:socket/skills-sh/starchild-ai-agent%2Fofficial-skills%2Flayerzero-value-transfer%2F@8b0b62036247a1f8dec148d50b677d901a96224c172521617f6e3841cd9612f2
Security Audit — socket — layerzero-value-transfer