treasures-wallet

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN in intent and purpose-aligned: it talks directly to the official Treasures API and does not use suspicious installers or third-party credential relays. However, it is HIGH security risk overall because it enables real-money trading and handles reusable API keys locally; misuse, prompt mistakes, or unauthorized invocation could trigger financial transactions.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Aug 27, 2026, 08:40 AM
Package URL
pkg:socket/skills-sh/treasures-io%2Ftreasures-finance-agent-skills%2Ftreasures-wallet%2F@73ef3add9920d705b47f6007fe84756752ea16c2e60dcb3572dd23fdc538be0a
Security Audit — socket — treasures-wallet