trade

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities are aligned for crypto trading, and the AWAL CLI appears to be Coinbase-associated and officially documented, so this is not clear malware. However, it enables autonomous financial transactions and depends on a mutable external CLI (`npx ...@latest`) that installs additional components, making the overall security risk high despite low evidence of malicious intent.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Oct 9, 2026, 02:41 PM
Package URL
pkg:socket/skills-sh/enuno%2Fclaude-command-and-control%2Ftrade%2F@9f2d2a10e374d345321b2dada059c511ead78895606ef2dd4c387e009e6ce62b