walletconnect-pay

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is broadly aligned with its stated purpose and uses same-org WalletConnect tooling, but it enables autonomous financial actions and routes some operations through a proxy path rather than clearly direct official APIs. Credentials and Travel Rule PII are proportionate to payment workflows, yet the payment capability plus intermediary routing makes the overall skill high-risk to run without explicit user approval per action.

Confidence: 83%Severity: 74%
Audit Metadata
Analyzed At
Sep 26, 2026, 03:20 PM
Package URL
pkg:socket/skills-sh/walletconnect%2Fagent-sdk%2Fwalletconnect-pay%2F@e7bf3f0abb9d9f3ba2354cdf24b7c475bce3114fe291c4a74360f4938aaaac79