SunPerp Perpetual Futures Trading

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core API use and credential needs are broadly aligned with a trading skill, and the SunPerp/SunX endpoint appears purpose-consistent. However, this skill has a large financial footprint: it can execute leveraged trades and withdrawals, requires sensitive exchange keys plus a TRON private key, and introduces transitive trust via another skill. It is not clearly malicious, but it is high-consequence and should only be used with strict human approval and minimal credentials.

Confidence: 83%Severity: 67%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:06 PM
Package URL
pkg:socket/skills-sh/bofai%2Fskills%2Fsunperp-perpetual-futures-trading%2F@e1932fd78ec77ef08f3047e694af2aaf05fa01a7
Security Audit — socket — SunPerp Perpetual Futures Trading