cournot

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core Cournot API usage is broadly consistent with the stated purpose, but the skill expands trust to third-party wallet software and a transitive Binance wallet skill, and it enables real on-chain payment signing. Data flow is mostly coherent and not overtly exfiltrative, yet the combined payment, external signer, and skill-install chain make this higher-risk than a normal read-only API skill.

Confidence: 82%Severity: 62%
Audit Metadata
Analyzed At
Aug 25, 2026, 10:35 AM
Package URL
pkg:socket/skills-sh/cournot-ai%2Fcournot-skills%2Fcournot%2F@5164ca567c3426bc563ff88361fd8c80ca5d1f81e34903d1fd243e34feb5dddf
Security Audit — socket — cournot