bifrost-slpx-stake

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is internally consistent with its stated Bifrost staking purpose and uses mostly legitimate same-org/offical tooling references, so it is not clearly malicious. However, it enables high-impact cryptocurrency transactions and can directly handle private keys for agent-side signing, which makes it a high-risk financial automation skill even with CONFIRM safeguards.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Mar 13, 2026, 02:57 AM
Package URL
pkg:socket/skills-sh/bifrost-io%2Fskills%2Fbifrost-slpx-stake%2F@e0e39df144d4df5a16d355fcbd8d5ed6455b45f4