bankr

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally aligned with a crypto trading/wallet platform, and the main install/API endpoints appear first-party and legitimate. However, its footprint is inherently high risk: it grants an AI agent broad financial authority, raw signing/submission, automation, browsing of untrusted content, and credential use across Bankr services and optional third-party tools. This looks more like a legitimate but dangerous financial-agent skill than confirmed malware.

Confidence: 90%Severity: 82%
Audit Metadata
Analyzed At
Sep 16, 2026, 05:11 PM
Package URL
pkg:socket/skills-sh/bankrbot%2Fskills%2Fbankr%2F@145414f578ce9be3a65257e5b60b0f91cd827991b0794e963ea22a4eb9a61884
Security Audit — socket — bankr