layerzero-teneo

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose broadly matches its LayerZero/Teneo function, but its real footprint is deferred to a separate bundled CLI skill and local binary, creating a transitive trust problem. No direct credential theft or overt exfiltration is shown here, yet the install/execution chain and opaque remote agent behavior make this higher risk than a normal documentation-only skill.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Apr 16, 2026, 06:17 AM
Package URL
pkg:socket/skills-sh/TeneoProtocolAI%2Fteneo-skills%2Flayerzero-teneo%2F@3602000cbb78cb80374ae1781457d8caa8819999