hunch

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent for a prediction-market betting assistant, and its host-pinning plus challenge-checking rules are stronger than typical skills. However, it authorizes real-money on-chain payments, performs public posting workflows, and relies on a custom domain service that could not be independently verified from the provided evidence. This is not confirmed malware, but it is a high-impact financial skill with meaningful trust and autonomy risk.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Sep 24, 2026, 04:46 AM
Package URL
pkg:socket/skills-sh/bankrbot%2Fskills%2Fhunch%2F@9fdcfc706ef9e375bbddccbc5c00af1692f9c791f7afffcfcc9c2bab20957782
Security Audit — socket — hunch