wallet
Warn
Audited by Socket on Apr 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core wallet capabilities match the stated purpose, but the skill enables high-impact financial actions, stores a private key in a local `.env`, allows optional third-party routing via custom RPC/ABI proxy, and references an unverifiable `synctx` signing CLI. This is not confirmed malware, but it is a high-risk skill due to autonomous transaction/signing capability and unverifiable dependency trust.
Confidence: 85%Severity: 81%
Audit Metadata