crypto-hft

Warn

Audited by Socket on Sep 19, 2026

2 alerts found:

SecurityAnomaly
SecurityMEDIUM
SKILL.md

High-risk but not clearly malicious. The skill is coherent with its stated purpose, yet that purpose is itself sensitive: it empowers an AI agent to place live crypto trades using highly privileged credentials. No suspicious installer or off-purpose data routing is shown, but the autonomous financial-action capability and private-key handling make the skill unsafe by default for many environments.

Confidence: 84%Severity: 82%
AnomalyLOW
index.ts

The fragment appears to be a legitimate command interface for an automated Polymarket crypto trading engine, not malware. It intentionally consumes wallet and API credentials for trading and can initiate live financial transactions. The imported execution, feed, engine, and preset implementations require separate review, particularly preset path handling and credential management. Within this file there is no evidence of exfiltration, backdoors, obfuscation, or destructive behavior.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Sep 19, 2026, 05:28 AM
Package URL
pkg:socket/skills-sh/alsk1992%2Fcloddsbot%2Fcrypto-hft%2F@d8e131ead6ae6d0304ec3f9dab94c817c925d1dbf501c9998001106a13103060