create-script-template

Fail

Audited by Socket on Apr 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
.clawnet/unsigned-skill.json

This dependency appears to package a large hex-encoded secondary payload that, when decoded and consumed, generates blockchain/transaction script templates (including OP_RETURN-style message embedding and signing/pubKeyHash-related structure). The fragment shows strong obfuscation/indirection and a “generator” style design that can enable downstream misuse of signed or attacker-controlled script artifacts. However, direct malware behaviors against the host (exfiltration, command execution, credential theft) are not evidenced in the provided excerpt, so malicious intent cannot be confirmed—only elevated supply-chain and misuse risk is supported.

Confidence: 86%
Audit Metadata
Analyzed At
Apr 12, 2026, 02:09 PM
Package URL
pkg:socket/skills-sh/b-open-io%2Fbsv-skills%2Fcreate-script-template%2F@62bf4feb3c4c708ecdcc44eb7f9ed46f6eda3cd3