starknet-anonymous-wallet
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileThe skill is broadly coherent with its stated purpose: it provides agent-facing scripts to create/load Starknet accounts, interact with contracts, and perform preflight and ABI discovery using Typhoon and AVNU SDKs. The dependency sources are official registries, and the network/data flows align with typical on-chain tooling. The primary security considerations are: handling of private keys via environment variables, ensuring RPC endpoints are trusted, and preventing leakage of sensitive data through logs. No unverifiable binaries or obvious data exfiltration channels are present, and there is no evidence of autonomous real-world actions beyond user-initiated blockchain operations. Overall, the footprint is benign and proportionate to the stated wallet/interaction functionality, with moderate privacy and credential-handling concerns that should be mitigated via secure secret management and logging controls.