helius-dflow

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is broadly coherent with its stated Solana trading purpose, and its Helius/DFlow integrations mostly match that purpose. However, it enables autonomous financial actions, instructs installation of additional MCP infrastructure, and can drive live transaction execution, making it high risk even without clear evidence of malware or credential theft.

Confidence: 83%Severity: 72%
Audit Metadata
Analyzed At
Apr 18, 2026, 12:42 PM
Package URL
pkg:socket/skills-sh/helius-labs%2Fcore-ai%2Fhelius-dflow%2F@18a4f114ba84fc7b10ddaf2a2ccd9ef84674b4c9