moltycash

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s capabilities match its stated payment purpose, and the Bankr CLI appears to be an official dependency, so this is not confirmed malware. However, it enables autonomous financial transactions and forwards a Molty identity token through a third-party CLI, creating meaningful credential-handling and real-world action risk disproportionate to a normal low-risk skill.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Apr 9, 2026, 02:32 AM
Package URL
pkg:socket/skills-sh/BankrBot%2Fskills%2Fmoltycash%2F@8bf17d3c58bc0a2122cb5bc461cd743f40bf8cc8