Security audit
Security checks across malware telemetry and agentic risk
The skill is a disclosed crypto payment tool, but its optional hot-wallet mode can load local or environment wallet keys and broadcast irreversible transfers, so it belongs in Review before installation.
Install only if you intend to use a crypto payment bridge and understand the difference between the default keyless flow and Mode B. Avoid Mode B unless you are comfortable letting the agent process access a low-balance hot wallet; prefer paying from your own wallet, hardware wallet, or exchange withdrawal. Do not keep valuable wallet private keys or passphrases in project .env files, and treat --send with --yes as capable of moving real funds.
environment (or a gitignored `.env`) still works for unattended automation. <details> <summary><b>Set up a local wallet for <code>--send</code></b> — .env template and per-wallet export steps</summary> **None of this is needed for the default path.** Paying from your own wallet needs no key and no configuration, and works with wallets that can never be
(`chmod 600`) ni estar bajo seguimiento de git. Ambos casos se rechazan, no se advierten. <details> <summary><b>Configurar una billetera local para <code>--send</code></b> — plantilla .env y pasos de exportación por billetera</summary> **Nada de esto hace falta para la ruta por defecto.** Pagar desde la propia billetera no necesita clave ni configuración, y funciona con billeteras que aquí
いてもいけません。どちらの場合も警告ではなく拒否されます。 <details> <summary><b><code>--send</code> 用のローカルウォレット設定</b> — .env テンプレートとウォレット別の書き出し手順</summary> **既定の経路ではここに書かれたものは一切不要です。** 自分のウォレットから支払う場合、 鍵も設定も要りません。しかもここでは決して使えないウォレット — ハードウェアウォレットや
not be tracked by git. Both are refused rather than warned about. <details> <summary><b>Set up a local wallet for <code>--send</code></b> — .env template and per-wallet export steps</summary> **None of this is needed for the default path.** Paying from your own wallet needs no key and no configuration, and works with wallets that can never be
直接拒绝，而不是只给个警告。 <details> <summary><b>为 <code>--send</code> 配置本地钱包</b> —— .env 模板与各钱包导出步骤</summary> **默认路径不需要这里的任何东西。** 用你自己的钱包付款既不需要私钥也不需要任何配置， 而且支持那些在这里根本用不了的钱包 —— 包括硬件钱包和交易所账户。
</details> <details> <summary><b>Configurar una billetera local para <code>--send</code></b> — plantilla .env y pasos de exportación por billetera</summary> **Nada de esto hace falta para la ruta por defecto.** Pagar desde la propia billetera no necesita clave ni configuración, y funciona con billeteras que aquí
</details> <details> <summary><b><code>--send</code> 用のローカルウォレット設定</b> — .env テンプレートとウォレット別の書き出し手順</summary> **既定の経路ではここに書かれたものは一切不要です。** 自分のウォレットから支払う場合、 鍵も設定も要りません。しかもここでは決して使えないウォレット — ハードウェアウォレットや
</details> <details> <summary><b>为 <code>--send</code> 配置本地钱包</b> —— .env 模板与各钱包导出步骤</summary> **默认路径不需要这里的任何东西。** 用你自己的钱包付款既不需要私钥也不需要任何配置， 而且支持那些在这里根本用不了的钱包 —— 包括硬件钱包和交易所账户。
solana-keygen already wrote) for Solana or ROZO_CHECKOUT_EVM_KEYSTORE (an encrypted V3 keystore, passphrase prompted, never argv) for EVM; then a raw key in ROZO_CHECKOUT_SOL_KEY / ROZO_CHECKOUT_EVM_KEY, which is the unattended- automation option. Those settings may also come from a .env in the working directory (or --env-file <path>): only ROZO_CHECKOUT_* keys are read from it, it is parsed as text and never shell-evaluated, and the real environment wins. Key files and .env must be chmod 600 and untracked by git.
automation option. Those settings may also come from a .env in the working directory (or --env-file <path>): only ROZO_CHECKOUT_* keys are read from it, it is parsed as text and never shell-evaluated, and the real environment wins. Key files and .env must be chmod 600 and untracked by git. ## Local wallet setup for --send (not needed for the default keyless path)
## Local wallet setup for --send (not needed for the default keyless path) .env keys (only ROZO_CHECKOUT_* are read; real env wins; chmod 600; gitignore): ROZO_CHECKOUT_SOL_KEY base58 string OR JSON byte array ROZO_CHECKOUT_EVM_KEY 64 hex chars, 0x prefix optional ROZO_CHECKOUT_EVM_KEYSTORE path to an encrypted V3 keystore
return false;
}
}
function planKeySource({ family, keyfile, env = process.env }) {
if (keyfile) {
const resolved = expandHome(keyfile);
let text;}
return p;
}
const fallback = path3.join(cwd, ".env");
return fs3.existsSync(fallback) ? fallback : null;
}
function applyDotenv({ file, cwd = process.cwd(), env = process.env } = {}) {const fallback = path3.join(cwd, ".env");
return fs3.existsSync(fallback) ? fallback : null;
}
function applyDotenv({ file, cwd = process.cwd(), env = process.env } = {}) {
const target = resolveEnvFile({ file, cwd });
if (!target) return null;
let stat;65/65 vendors flagged this skill as clean.
Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.exposed_secret_literal