crypto-wallet-testing
Audited by Socket on Mar 10, 2026
1 alert found:
SecurityThe skill's stated purpose is coherent with providing a test wallet and bridging capabilities for dev/testing workflows. However, there are substantial security concerns: it relies on unverifiable, external binaries installed via curl|bash, handles private keys from environment/files with potential logging exposure, and interacts with cross-chain bridges that can expose transaction data to third parties. These factors indicate a high risk of credential exposure and potential fund loss if misused or misconfigured. Overall, the footprint is suspicious to high-risk for a testing utility, and would require strict safeguards (avoiding unverifiable binaries, ensuring key-masking in logs, explicit user approval for each bridge operation, and clear separation of test funds from any production keys).