doppel-erc-8004

Fail

Audited by Socket on Feb 26, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The onboarding workflow described is coherent and aligned with ERC-8004 and Doppel hub integration. However, a critical security anomaly exists: the private key is printed to the console. This significantly elevates risk due to potential credential leakage. While the rest of the flow (secret handling through env variables, onchain interactions, and external API reliance) is typical for such a guide, operational security must be tightened: remove private key exposure, use secure vaults or secret managers, implement proper log redaction, and ensure all external endpoints are trusted and transmitted over TLS. Overall risk is moderate to high due to credential exposure, with malware likelihood remaining low given no evidence of malicious payloads.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 26, 2026, 04:17 PM
Package URL
pkg:socket/skills-sh/openclaw%2Fskills%2Fdoppel-erc-8004%2F@9ff5cac6a5b6c66fc517c83d81c1b422e5e5ee3c