skills/johnnywic/bybit-skills-hub/bybit-v5/Socket

bybit-v5

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill is purpose-aligned with Bybit trading and uses official Bybit endpoints, so it does not look like credential harvesting malware. However, it grants an AI agent direct financial execution capabilities and instructs storing raw API secrets in TOOLS.md, making the overall risk high even without third-party exfiltration.

Confidence: 90%Severity: 74%

Audit Metadata

Analyzed At

Sep 25, 2026, 04:09 PM

Package URL

pkg:socket/skills-sh/johnnywic%2Fbybit-skills-hub%2Fbybit-v5%2F@0afe9a78197a5a2f30e807060023e1610a838a5cf997cb14b879ca4c60eff316