clawlogic-trader

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose matches the capabilities, but the skill has a high-risk footprint because it enables autonomous on-chain trading and public posting, installs via a transitive skills chain from a personal GitHub repo, and runs a mutable `@latest` CLI that handles wallet credentials. This looks more like a legitimate but dangerous financial-agent skill than confirmed malware.

Confidence: 89%Severity: 80%
Audit Metadata
Analyzed At
Oct 9, 2026, 04:59 AM
Package URL
pkg:socket/skills-sh/kaushal-205%2Fclawlogic%2Fclawlogic-trader%2F@f4de0be2b8dc58ed31463312a79ab5265398f4d7d2a91dcf262ead88d4dc1eec