@1458/dust-sweeper

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the trading behavior fits the skill's stated purpose, but it asks for a highly permissive wildcard wallet policy, can grant lasting token approvals, and supports scheduled autonomous swaps. Data flow appears aligned with Odos/Jupiter rather than an obvious exfiltration proxy, so this looks more like an over-privileged financial automation skill than confirmed malware.

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
Mar 14, 2026, 08:23 AM
Package URL
pkg:socket/skills-sh/Starchild-ai-agent%2Fcommunity-skills%2Fdust-sweeper%2F@4db9de6959bab0ab9daa73bc196f64ed7c79175e