b402 Private DeFi

• Analyzed: Apr 16, 2026, 5:31 PM
• Findings: 1
• Version: 0.4.2
• Hash: c047ed735a01e60502a181969870da6710b38953726fc8676833eb5874f5f641
• Source: palm
• External report: View on VirusTotal

Findings (1)

The b402-private-defi skill provides tools for privacy-preserving DeFi operations, including shielding tokens and cross-chain bridging. It requires a high-value secret (WORKER_PRIVATE_KEY) and performs 'untraceable' financial transactions, which are high-risk behaviors. While these actions are aligned with the stated purpose, the combination of private key handling and the installation of external code via 'npx b402-mcp' (SKILL.md) warrants a suspicious classification due to the potential for abuse or exploitation.