cult-film-curtis

Warn

Audited by Socket on Mar 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The code fragment implements a monetized cult-film recommendation agent with TMDB as the data source. It exposes free and paid endpoints with clear pricing and integrates a payments flow via environment-configured credentials and a facilitator URL. While there are no obvious direct malware patterns, the payment-related surface (EVM_PRIVATE_KEY, PAYMENTS_RECEIVABLE_ADDRESS, FACILITATOR_URL) introduces external trust and supply-chain risk. Overall, the design is sound for its purpose, but secure handling of payment keys, trusted facilitator configuration, and careful logging are essential to minimize risk.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 4, 2026, 02:17 PM
Package URL
pkg:socket/skills-sh/daydreamsai%2Fskills-market%2Fcult-film-curtis%2F@17bdc64ba65be6dcc926b0e6d93f30958f88be50