crypto-advisor
Warn
Audited by Socket on Aug 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s core crypto-analysis purpose matches its market-data and news-fetch behavior, but it goes beyond analysis into autonomous scheduled publishing and broad local script execution. Main risks are autonomy abuse, prompt-injection exposure from external content, and trust in unverified repo-local helper scripts rather than clear malicious exfiltration.
Confidence: 90%Severity: 78%
Audit Metadata