peer-to-peer-payments-exchange

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose and capabilities are broadly aligned, but it orchestrates high-impact financial actions and delegates heavily to other skills/connectors without showing approval gates or downstream trust boundaries. No direct credential theft or malicious exfiltration is visible in this fragment, but the autonomy and transitive-trust footprint make it a meaningful security risk.

Confidence: 79%Severity: 68%
Audit Metadata
Analyzed At
Mar 21, 2026, 02:45 AM
Package URL
pkg:socket/skills-sh/serenorg%2Fseren-skills%2Fpeer-to-peer-payments-exchange%2F@5c9ed9345cc04c0c1b643271bd5abadf01e4ec11