treasures-wallet

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. Purpose, credentials, and network flows are internally consistent with a legitimate Treasures wallet skill and use official Treasures endpoints, with no third-party proxying or installer risk. However, it grants an AI agent direct financial trading capability and stores a reusable API key locally, so overall security risk is high despite low evidence of malware.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Oct 3, 2026, 06:48 AM
Package URL
pkg:socket/skills-sh/treasures-io%2Ftreasures-finance-agent-skills%2Ftreasures-wallet%2F@3135ac69f5720e2d3f15c47e284f40d16e8107178850bd672af6e7010a20233d