crypto-daily
Warn
Audited by Socket on Aug 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The workflow is coherent for crypto publishing, but it grants an AI agent high-impact autonomous posting powers and chains trust through other skills/binaries, including an unproven telegram-cli component. The main concern is not hidden malware in this file; it is the combination of scheduled public actions, browser-account control, and third-party skill/tool dependence.
Confidence: 87%Severity: 81%
Audit Metadata