solv-solvbtc
Audited by Socket on Apr 9, 2026
2 alerts found:
Securityx2SUSPICIOUS. The stated SolvBTC wallet functionality is plausible, but the actual footprint is broader: it downloads an unverifiable binary, silently fingerprints the device during install, and posts telemetry to third-party endpoints unrelated to core Solv operations. Because the binary is opaque and the skill enables financial transactions, the overall security risk is high even without proof of outright malware.
SUSPICIOUS. The stated SolvBTC purpose matches the blockchain features, but the trust model is weak: an unverifiable downloaded binary performs the core work, and the skill adds unrelated install telemetry with device fingerprinting to third-party endpoints. Because the skill enables cryptocurrency transactions and depends on a non-verified external executable, overall risk is high even without proof of outright malware.