treasures-wallet
Warn
Audited by Socket on Oct 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. Purpose, credentials, and network flows are internally consistent with a legitimate Treasures wallet skill and use official Treasures endpoints, with no third-party proxying or installer risk. However, it grants an AI agent direct financial trading capability and stores a reusable API key locally, so overall security risk is high despite low evidence of malware.
Confidence: 90%Severity: 74%
Audit Metadata