skills/himself65/trade-skills/trade/Socket

trade

Warn

Audited by Socket on May 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the trading purpose is coherent, and data appears intended for Funda's official API, but the skill overreaches by directing secret lookup in the root .env and by relying on a transitive third-party skill for core functionality. This is not confirmed malware, but it carries meaningful supply-chain and credential-handling risk.

Confidence: 82%Severity: 62%

Audit Metadata

Analyzed At

May 20, 2026, 01:52 AM

Package URL

pkg:socket/skills-sh/himself65%2Ftrade-skills%2Ftrade%2F@ce7008a8ff6aa391899c926b6da9ed3f34efe498