skills/elfa-ai/skills/elfa-gmx/Socket

elfa-gmx

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS due to transitive skill installation and high-risk autonomous trading capabilities, not because of clear malware indicators. The skill is mostly coherent with its stated purpose, but it delegates core API behavior to another skill and enables real-money automated trading with sensitive credentials.

Confidence: 88%Severity: 74%

Audit Metadata

Analyzed At

Jul 20, 2026, 07:59 AM

Package URL

pkg:socket/skills-sh/elfa-ai%2Fskills%2Felfa-gmx%2F@efddbbae71cde09774bcde2b8fb8c6c9b26fb3de8a5248e726c0fc9a05b40742