wallet-integration
Warn
Audited by Socket on Mar 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill describes legitimate wallet integration capabilities but exhibits significant security and trust concerns in data flows and supply chain. Key materials (private keys/mnemonics) appear to be exposed to remote services and non-encrypted channels (ws://), and there is inconsistency between documented install sources and the declared dependencies. Overall, the footprint is suspicious rather than benign: it could enable credential exposure and exfiltration, and the data paths are not clearly aligned with secure wallet design best practices.
Confidence: 66%Severity: 72%
Audit Metadata