nunchuk-wallet-creation
Warn
Audited by Socket on May 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose aligns with wallet creation, but it enables high-impact cryptocurrency operations, handles sensitive wallet material, and depends on a `nunchuk` CLI whose official provenance/install path is not clearly documented in public Nunchuk docs. No direct exfiltration endpoint is shown, but the combination of unverifiable CLI trust, wallet backup export, hot-key generation, and financial policy automation makes this a high-risk skill.
Confidence: 83%Severity: 78%
Audit Metadata