poe-mercenary-trade

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated purpose is coherent with querying the PoE China trade site, but the skill depends on an unverifiable local CLI that can drive an authenticated Chrome CDP session. No explicit third-party exfiltration or malicious action is shown, yet the executable trust and session-access scope make this a high security-risk skill.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Aug 11, 2026, 02:18 PM
Package URL
pkg:socket/skills-sh/958877748%2Fskills%2Fpoe-mercenary-trade%2F@5e3e84f658118d3810a1923cb28573b6cb7042b3e992bf1734bca1b3962fd7ea
Security Audit — socket — poe-mercenary-trade