wallet

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core wallet capabilities match the stated purpose, but the skill enables high-impact financial actions, stores a private key in a local `.env`, allows optional third-party routing via custom RPC/ABI proxy, and references an unverifiable `synctx` signing CLI. This is not confirmed malware, but it is a high-risk skill due to autonomous transaction/signing capability and unverifiable dependency trust.

Confidence: 85%Severity: 81%
Audit Metadata
Analyzed At
Apr 14, 2026, 09:55 AM
Package URL
pkg:socket/skills-sh/synctxai%2Fsynctx%2Fwallet%2F@fdcae9651fa664941c374d8eb7c18c08e158f884