trading-futures
Warn
Audited by Socket on Oct 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The documented capabilities broadly match the stated purpose of futures trading, and the flagged scanner items appear benign documentation artifacts. However, the skill is still high risk because it authorizes an AI agent to perform autonomous real-world financial actions, including leveraged trading, withdrawals/transfers, and account changes across several services using sensitive credentials and a private key. This looks more like a dangerous financial automation skill than malware or credential theft.
Confidence: 90%Severity: 83%
Audit Metadata