wallet-integration

Warn

Audited by Socket on Mar 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill describes legitimate wallet integration capabilities but exhibits significant security and trust concerns in data flows and supply chain. Key materials (private keys/mnemonics) appear to be exposed to remote services and non-encrypted channels (ws://), and there is inconsistency between documented install sources and the declared dependencies. Overall, the footprint is suspicious rather than benign: it could enable credential exposure and exfiltration, and the data paths are not clearly aligned with secure wallet design best practices.

Confidence: 66%Severity: 72%
Audit Metadata
Analyzed At
Mar 7, 2026, 05:44 PM
Package URL
pkg:socket/skills-sh/alphaonedev%2Fopenclaw-graph%2Fwallet-integration%2F@87b2b7dbd30ce1a74f5d6a86587946a378d14390