crypto-daily

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The workflow is coherent for crypto publishing, but it grants an AI agent high-impact autonomous posting powers and chains trust through other skills/binaries, including an unproven telegram-cli component. The main concern is not hidden malware in this file; it is the combination of scheduled public actions, browser-account control, and third-party skill/tool dependence.

Confidence: 87%Severity: 81%
Audit Metadata
Analyzed At
Aug 20, 2026, 02:24 PM
Package URL
pkg:socket/skills-sh/dzianisv%2Fnonfinancialadviceagents%2Fcrypto-daily%2F@1d39de79c553173394b0028bfb717d91a10b29a02b8b4389d5cc865589fa8367
Security Audit — socket — crypto-daily