treasures-wallet
Warn
Audited by Socket on Aug 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
BENIGN in intent and purpose-aligned: it talks directly to the official Treasures API and does not use suspicious installers or third-party credential relays. However, it is HIGH security risk overall because it enables real-money trading and handles reusable API keys locally; misuse, prompt mistakes, or unauthorized invocation could trigger financial transactions.
Confidence: 89%Severity: 78%
Audit Metadata