elfa-grvt-bot

Warn

Audited by Socket on May 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent and routes data to official service endpoints, so it does not look like credential theft or hidden malware. However, it enables autonomous live cryptocurrency derivatives trading on production accounts, which is inherently high risk and sufficient to classify the skill as suspicious rather than benign.

Confidence: 90%Severity: 81%
Audit Metadata
Analyzed At
May 17, 2026, 10:01 AM
Package URL
pkg:socket/skills-sh/elfa-ai%2Fskills%2Felfa-grvt-bot%2F@a45ab64753a03779ba89f591a49e7e59060d4241
Security Audit — socket — elfa-grvt-bot