nara

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is broadly aligned with its stated blockchain purpose, but it enables high-risk wallet operations, autonomous financial actions, insecure HTTP relay use on devnet, arbitrary endpoint redirection, on-chain file publication, and transitive skill installation. This looks more like a hazardous crypto agent workflow than confirmed malware.

Confidence: 87%Severity: 86%
Audit Metadata
Analyzed At
Mar 13, 2026, 04:26 PM
Package URL
pkg:socket/skills-sh/nara-chain%2Fnara-cli%2Fnara%2F@7005e17b0da47c58fc93765bef958cab853b3192