injective-trading-bridge

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is purpose-aligned and its only install instruction points to a verifiable same-org related skill, so there is no strong malware or exfiltration signal. However, it enables high-impact financial transactions, forwards wallet passwords to external MCP tooling, reuses wallet keys across chains, and adds transitive trust through another skill, so overall security risk is medium.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Oct 9, 2026, 02:39 PM
Package URL
pkg:socket/skills-sh/injectivelabs%2Fagent-skills%2Finjective-trading-bridge%2F@d1b9cc64ccc19c2faddcf4816a6ed0c3055888114e49f8278517dd5c26225278