aomi-transact

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's blockchain capabilities align with its stated purpose, and its network endpoint appears same-org (`api.aomi.dev`). However, it enables high-impact financial actions and instructs users to pass a raw private key into a third-party CLI whose exact public package provenance was not fully verified from the provided evidence. This is a coherent but high-risk wallet/transaction skill, not confirmed malware.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Mar 13, 2026, 12:03 AM
Package URL
pkg:socket/skills-sh/aomi-labs%2Fskills%2Faomi-transact%2F@6df72a1376d3a4db1cad11a52f0b1d0fd941b2cd