skills/dzianisv/nonfinancialadviceagents/crypto-daytrading/Socket

crypto-daytrading

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill is coherent with its stated crypto day-trading purpose and uses mostly official dependencies, but it materially increases risk by enabling AI-assisted live trading and forwarding exchange credentials into a CLI that can place orders. This looks like a high-risk financial automation skill, not confirmed malware.

Confidence: 90%Severity: 82%

Audit Metadata

Analyzed At

Aug 20, 2026, 02:22 PM

Package URL

pkg:socket/skills-sh/dzianisv%2Fnonfinancialadviceagents%2Fcrypto-daytrading%2F@16c8fdd973df6c801e4b275e7e813d5b6b734b6c0c7579e793f8b1bc5158443a