polygon-discovery
Warn
Audited by Socket on May 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s payment-gateway purpose is coherent, but its footprint is high risk because it routes many unrelated services through a third-party Render-hosted API and enables automatic wallet-funded transactions. The main concern is autonomous spending plus external processing of potentially sensitive code and text, not confirmed malware.
Confidence: 86%Severity: 81%
Audit Metadata