crypto-advisor

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s core crypto-analysis purpose matches its market-data and news-fetch behavior, but it goes beyond analysis into autonomous scheduled publishing and broad local script execution. Main risks are autonomy abuse, prompt-injection exposure from external content, and trust in unverified repo-local helper scripts rather than clear malicious exfiltration.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Aug 20, 2026, 02:24 PM
Package URL
pkg:socket/skills-sh/dzianisv%2Fnonfinancialadviceagents%2Fcrypto-advisor%2F@ad7821153319a69788d9f11cfc860f1c7fdd92c9bd293252cedaf78dcf5dd508
Security Audit — socket — crypto-advisor