crypto-advisor

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core crypto-advice purpose is internally coherent, and the skill explicitly avoids autonomous trading, but it depends on loading multiple unverified sub-skills and references an exchange connector in a high-stakes financial workflow. With no direct credential harvesting, malware behavior, or hidden execution in the provided text, this is best classified as medium security risk due to transitive trust and potential expansion of capability beyond the visible skill.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 16, 2026, 08:03 AM
Package URL
pkg:socket/skills-sh/dzianisv%2Ffinancial-advisor-agents%2Fcrypto-advisor%2F@6823765d5673ce72389a0e098ef48bbe98c09e6173041490f7295cf0241fda1b
Security Audit — socket — crypto-advisor