skills/moonpay/skills/yield-optimization/Socket

yield-optimization

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill's crypto/yield capabilities match its stated purpose and its main services appear official, so this is not confirmed malware. However, it is high-impact because it enables autonomous financial transactions, uses a transitive unpinned skill installer, and hands sensitive wallet/API capabilities to external CLIs and services.

Confidence: 89%Severity: 78%

Audit Metadata

Analyzed At

Apr 23, 2026, 10:48 PM

Package URL

pkg:socket/skills-sh/moonpay%2Fskills%2Fyield-optimization%2F@93b7262762119dc34c06155a231a41d6d8eca700