skills/moonpay/skills/moonpay-scout/Socket

moonpay-scout

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally coherent for prediction-market trading, and the MoonPay CLI install path appears official and same-org. However, it grants an AI agent real-money trading capability through a third-party CLI and explicitly encourages execution of opportunities, so the main risk is autonomous financial action rather than hidden exfiltration or malware.

Confidence: 86%Severity: 74%

Audit Metadata

Analyzed At

Mar 21, 2026, 10:28 PM

Package URL

pkg:socket/skills-sh/moonpay%2Fskills%2Fmoonpay-scout%2F@8d2d0a277dc2afe152f7eae3dd6de0ac32fc00d7