nunchuk-wallet-creation

Warn

Audited by Socket on May 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose aligns with wallet creation, but it enables high-impact cryptocurrency operations, handles sensitive wallet material, and depends on a `nunchuk` CLI whose official provenance/install path is not clearly documented in public Nunchuk docs. No direct exfiltration endpoint is shown, but the combination of unverifiable CLI trust, wallet backup export, hot-key generation, and financial policy automation makes this a high-risk skill.

Confidence: 83%Severity: 78%
Audit Metadata
Analyzed At
May 10, 2026, 02:54 AM
Package URL
pkg:socket/skills-sh/nunchuk-io%2Fagent-skills%2Fnunchuk-wallet-creation%2F@dc274e0fee75f47cf20a94d5f06399e04045f92f