treasures-b2b-api

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN for purpose alignment and data flow: the skill's crypto libraries, wallet signing, API headers, and chain-specific instructions all match its stated trading/bridging purpose, and traffic goes to Treasures official domains rather than a third-party proxy. However, it is inherently HIGH security risk as an agent capability because it can execute real-world financial actions with user wallets and approvals on mainnet; use only with strict per-action user consent and tightly scoped credentials.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Oct 3, 2026, 06:48 AM
Package URL
pkg:socket/skills-sh/treasures-io%2Ftreasures-finance-agent-skills%2Ftreasures-b2b-api%2F@23dd54d7775a907387053c92a71a006d2f988b178c25c66646c3fb420084239c