trust-wallet-cli

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is purpose-aligned and uses an official npm package, so it does not look malicious or deceptive. However, it gives an AI agent direct cryptocurrency wallet and trading powers, plus optional MCP/REST exposure, creating high real-world financial risk even without evidence of credential exfiltration.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Sep 16, 2026, 04:29 PM
Package URL
pkg:socket/skills-sh/trustwallet%2Ftw-agent-skills%2Ftrust-wallet-cli%2F@331345710b892a43094aa03484079af43320122f9010ee4b8f14f99fd485afcf