treasures-b2b-api
Warn
Audited by Socket on Oct 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
BENIGN for purpose alignment and data flow: the skill's crypto libraries, wallet signing, API headers, and chain-specific instructions all match its stated trading/bridging purpose, and traffic goes to Treasures official domains rather than a third-party proxy. However, it is inherently HIGH security risk as an agent capability because it can execute real-world financial actions with user wallets and approvals on mainnet; use only with strict per-action user consent and tightly scoped credentials.
Confidence: 88%Severity: 74%
Audit Metadata