agentsats-cli

Warn

Audited by Socket on May 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is largely aligned with a wallet-enabled API CLI, but its footprint is high risk because it enables real STX payments, accepts sensitive private-key wallet material, allows arbitrary API endpoint overrides, and instructs cloning/building an external preview OWS CLI from a personal GitHub repo. The biggest issue is credential/signing delegation to an unverifiable third-party-built binary, which makes the install and payment path disproportionally risky even though it matches the claimed functionality.

Confidence: 88%Severity: 86%
Audit Metadata
Analyzed At
May 20, 2026, 09:20 PM
Package URL
pkg:socket/skills-sh/x402Stacks%2Fbitcoinagent-cli%2Fagentsats-cli%2F@b3270c70cbc4be1c5023d4324f9095795a78af5f
Security Audit — socket — agentsats-cli