trade
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's purpose and capabilities are aligned for crypto trading, and the AWAL CLI appears to be Coinbase-associated and officially documented, so this is not clear malware. However, it enables autonomous financial transactions and depends on a mutable external CLI (`npx ...@latest`) that installs additional components, making the overall security risk high despite low evidence of malicious intent.
Confidence: 90%Severity: 74%
Audit Metadata