walletconnect-pay
Warn
Audited by Socket on Sep 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is broadly aligned with its stated purpose and uses same-org WalletConnect tooling, but it enables autonomous financial actions and routes some operations through a proxy path rather than clearly direct official APIs. Credentials and Travel Rule PII are proportionate to payment workflows, yet the payment capability plus intermediary routing makes the overall skill high-risk to run without explicit user approval per action.
Confidence: 83%Severity: 74%
Audit Metadata