pear-protocol

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s core capabilities fit its stated DeFi trading purpose, but it grants an AI agent high-impact autonomous trading powers, persists a local signer private key, and may route sensitive traffic through an intermediary proxy. The endpoint mismatch with Pear’s public docs is not enough to prove malice, but it reduces trust and keeps risk elevated.

Confidence: 83%Severity: 83%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:50 AM
Package URL
pkg:socket/skills-sh/starchild-ai-agent%2Fofficial-skills%2Fpear-protocol%2F@a13f1d6268c0142a7e185e632afe9f0c04bb412200fa82a3dbc624605f5b8634
Security Audit — socket — pear-protocol