building-blocks

Fail

Audited by Socket on Mar 5, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

This document is a legitimate developer-facing DeFi reference containing accurate-sounding protocol summaries, verified addresses, and actionable Solidity patterns for swaps, hooks, ERC-4626 vaults, and flash loans. It does not contain obvious malicious code, exfiltration routines, obfuscation, or hard-coded credentials. The principal security concern is operational: if combined with automation or agent frameworks that possess signing authority or access to private keys, the recipes here enable high-impact financial operations (arbitrage, flash loan attacks, fund movements). Recommend: (1) Do not grant automated agents signing/broadcast capability without human approval and multi-party controls; (2) Audit any local files referenced (addresses/SKILL.md) before programmatic consumption; (3) Vet and pin upstream dependencies used in builds (periphery/core imports); (4) Use standard custody practices (hardware wallets, multisig) for any real-value operations. With those mitigations, the document is safe as guidance.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 5, 2026, 05:40 PM
Package URL
pkg:socket/skills-sh/austintgriffith%2Fethskills%2Fbuilding-blocks%2F@b53f048e551adc9bc7a62717dc398754ca0e0372