skills/moonpay/skills/moonpay-trading-automation/Socket

moonpay-trading-automation

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally consistent with MoonPay trading automation and shows no clear credential theft, hidden exfiltration, or malicious installer behavior. However, it enables persistent unattended crypto trades via scheduled jobs, which creates high real-world action risk disproportionate to ordinary helper skills.

Confidence: 92%Severity: 76%

Audit Metadata

Analyzed At

Sep 22, 2026, 05:11 PM

Package URL

pkg:socket/skills-sh/moonpay%2Fskills%2Fmoonpay-trading-automation%2F@443352fdadbb89b0459d2c23394229dc4aca5ffa637838909555416c3915818a