SunPump Meme Token Toolkit
Warn
Audited by Socket on Jul 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s crypto-trading purpose matches most capabilities, but it combines high-impact financial actions with a transitive skill installer and a notable CLI package provenance mismatch. The wallet secret requirements are proportionate for trading, yet trust in the exact external CLI receiving those secrets is not fully coherent from the provided evidence.
Confidence: 88%Severity: 78%
Audit Metadata