ton-create-wallet

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s wallet-creation purpose generally matches its capabilities, but it enables autonomous on-chain financial control, stores an operator private key, and routes onboarding through a not-publicly-verified dashboard/callback flow. No clear malware or credential-stealing behavior is shown, yet the combination of private-key custody plus external dashboard trust makes this a high-impact skill that should be treated cautiously.

Confidence: 80%Severity: 76%
Audit Metadata
Analyzed At
Mar 27, 2026, 10:53 AM
Package URL
pkg:socket/skills-sh/ton-connect%2Fkit%2Fton-create-wallet%2F@027fb5eadd9624f281603d2fc494fb31dc0aafd8