solana-token-launcher

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities broadly match its crypto/DeFi purpose, but it enables autonomous financial actions and routes launches, earnings, and other agent-linked data through a vendor-controlled gateway rather than direct official DEX APIs. No confirmed malware or command execution is present, yet the financial scope, third-party mediation, and documentation inconsistencies make this a medium-to-high security risk skill.

Confidence: 89%Severity: 68%
Audit Metadata
Analyzed At
Oct 5, 2026, 01:54 AM
Package URL
pkg:socket/skills-sh/tomi204%2Fclawpump-skill%2Fsolana-token-launcher%2F@408b02ce17ff496a7619bc66672d7759b95a511bd00e350c21be672e2afbd0a5