crypto-wallet-testing

Warn

Audited by Socket on Mar 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill's stated purpose is coherent with providing a test wallet and bridging capabilities for dev/testing workflows. However, there are substantial security concerns: it relies on unverifiable, external binaries installed via curl|bash, handles private keys from environment/files with potential logging exposure, and interacts with cross-chain bridges that can expose transaction data to third parties. These factors indicate a high risk of credential exposure and potential fund loss if misused or misconfigured. Overall, the footprint is suspicious to high-risk for a testing utility, and would require strict safeguards (avoiding unverifiable binaries, ensuring key-masking in logs, explicit user approval for each bridge operation, and clear separation of test funds from any production keys).

Confidence: 98%Severity: 78%
Audit Metadata
Analyzed At
Mar 10, 2026, 07:42 PM
Package URL
pkg:socket/skills-sh/ggonzalez94%2Fskills%2Fcrypto-wallet-testing%2F@98997b9665118c51860e1c8602842fb29dbd5c4b