moonpay-upgrade

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned and uses an official-looking MoonPay CLI path, with no clear evidence of credential theft or deceptive routing. However, it authorizes autonomous cryptocurrency spending from a local wallet, making it high risk for agent use despite not appearing malicious.

Confidence: 87%Severity: 76%
Audit Metadata
Analyzed At
Mar 21, 2026, 10:27 PM
Package URL
pkg:socket/skills-sh/moonpay%2Fskills%2Fmoonpay-upgrade%2F@9b20f39497fb99b10da212ce3b810996cc799cd6