payments

Fail

Audited by Socket on Feb 16, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The module/documentation is consistent with a legitimate unified payments audit and remediation tool but contains several high-risk operational behaviors: automated full-auto fixes via an external executor, insufficiently protected handling of sensitive credentials, effectful transaction commands without enforced safe defaults, and potential exposure of secrets in temporary files. I do not find explicit malicious code in the provided fragment, but the orchestration pattern could be abused or lead to accidental compromise. Mitigations before use: require least-privilege scoped credentials, enforce dry-run/manual review for automated fixes, avoid writing secrets to /tmp or commits, validate endpoint origins, and prefer local trusted automation over untrusted third-party executors.

Confidence: 98%
Audit Metadata
Analyzed At
Feb 16, 2026, 11:12 AM
Package URL
pkg:socket/skills-sh/phrazzld%2Fclaude-config%2Fpayments%2F@d47e672e5a0b4ce7e5d6bbbd06f91b9c556f6cae