func

Warn

Audited by Socket on May 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. 目的与能力大体一致:它确实是做 OHLCV 指标计算和图表展示。但技能把核心计算完全交给一个未在技能内证明来源的本地黑盒二进制 `~/projects/pi-go/bin/func`,这对其宣称用途来说是主要风险点,并触发未验证可执行文件的高风险判断。未见明确凭据窃取、第三方凭据转发或恶意外传,因此更像高风险脆弱/可疑技能而非确认恶意。

Confidence: 83%Severity: 86%
Audit Metadata
Analyzed At
May 20, 2026, 06:08 AM
Package URL
pkg:socket/skills-sh/npc-live%2Fclawfirm%2Ffunc%2F@0cc541e545d6d5f1a6784ec245ec5ba260b03c9f
Security Audit — socket — func