cournot
Warn
Audited by Socket on Aug 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core Cournot API usage is broadly consistent with the stated purpose, but the skill expands trust to third-party wallet software and a transitive Binance wallet skill, and it enables real on-chain payment signing. Data flow is mostly coherent and not overtly exfiltrative, yet the combined payment, external signer, and skill-install chain make this higher-risk than a normal read-only API skill.
Confidence: 82%Severity: 62%
Audit Metadata