messari-x402

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's purpose and Messari data flows are mostly coherent, but it empowers an AI agent to initiate paid crypto transactions via a local wallet. The main risk is autonomous financial spending and trust in an unspecified external CLI, not clear credential theft or deceptive exfiltration.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Mar 21, 2026, 10:28 PM
Package URL
pkg:socket/skills-sh/moonpay%2Fskills%2Fmessari-x402%2F@4afc786a1b987175ddb72517bcf5e981adc6ef65