SunPump Meme Token Toolkit

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s crypto-trading purpose matches most capabilities, but it combines high-impact financial actions with a transitive skill installer and a notable CLI package provenance mismatch. The wallet secret requirements are proportionate for trading, yet trust in the exact external CLI receiving those secrets is not fully coherent from the provided evidence.

Confidence: 88%Severity: 78%
Audit Metadata
Analyzed At
Jul 18, 2026, 06:14 PM
Package URL
pkg:socket/skills-sh/BofAI%2Fskills%2Fsunpump-meme-token-toolkit%2F@51a376acae4ab19ac5fabfc34d1ea51988f764b1
Security Audit — socket — SunPump Meme Token Toolkit