mirage-private-transfer

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose matches its capabilities, but it grants an AI agent high-impact cryptocurrency powers: wallet management, fund transfers, arbitrary Solana transaction signing, and broad program invocation. The main concern is not hidden malware behavior but the combination of autonomous financial action and reliance on an external Mirage CLI/service whose provenance is not established in the provided text.

Confidence: 86%Severity: 88%
Audit Metadata
Analyzed At
Apr 18, 2026, 02:09 PM
Package URL
pkg:socket/skills-sh/magicblock-labs%2Fmirage%2Fmirage-private-transfer%2F@185b03838fd9160fa1cab0d1ffa0fc8fbfb5b311