create-script-template
Fail
Audited by Socket on Apr 12, 2026
1 alert found:
Obfuscated FileObfuscated File.clawnet/unsigned-skill.json
HIGHObfuscated FileHIGH
.clawnet/unsigned-skill.json
This dependency appears to package a large hex-encoded secondary payload that, when decoded and consumed, generates blockchain/transaction script templates (including OP_RETURN-style message embedding and signing/pubKeyHash-related structure). The fragment shows strong obfuscation/indirection and a “generator” style design that can enable downstream misuse of signed or attacker-controlled script artifacts. However, direct malware behaviors against the host (exfiltration, command execution, credential theft) are not evidenced in the provided excerpt, so malicious intent cannot be confirmed—only elevated supply-chain and misuse risk is supported.
Confidence: 86%
Audit Metadata