skills/aibtcdev/skills/hermetica-yield-rotator/Socket

hermetica-yield-rotator

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is coherent and not overtly malicious, but it enables real-money DeFi reallocation and depends on an external MCP server installed from a mutable npm tag. Its main risk is autonomous financial action through third-party tooling, not hidden exfiltration.

Confidence: 88%Severity: 78%

Audit Metadata

Analyzed At

Oct 1, 2026, 05:04 AM

Package URL

pkg:socket/skills-sh/aibtcdev%2Fskills%2Fhermetica-yield-rotator%2F@dd50ef2d721fa9e5b80d7e5dc69cafefdcca1b83d0a4bb73df5d03f5849f96c3