skills/starchild-ai-agent/official-skills/wallet/Socket

wallet

Warn

Audited by Socket on Apr 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill’s capabilities mostly match its stated wallet purpose, but it grants an AI agent direct signing and transaction-broadcast powers with real financial impact. Official API dependencies appear coherent, yet the undocumented sc-proxy/wallet-service path and default allow-all policy create meaningful security risk even without clear malware indicators.

Confidence: 88%Severity: 74%

Audit Metadata

Analyzed At

Apr 15, 2026, 12:35 PM

Package URL

pkg:socket/skills-sh/Starchild-ai-agent%2Fofficial-skills%2Fwallet%2F@1659e32e66c490e954589aaf4081ddeadb429a60