earn-hunter

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s monitoring, local state, scheduler setup, and Telegram/Lark notifications are broadly consistent with its OKX Earn purpose, and the main CLI install is documented in the OKX ecosystem. Risk rises because it persists scheduled execution and performs transitive installation of additional marketplace skills, extending trust beyond the reviewed skill. No clear credential theft, covert exfiltration, or directly malicious behavior is evident from the provided content.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Jul 22, 2026, 02:58 PM
Package URL
pkg:socket/skills-sh/okx%2Fagent-skills%2Fearn-hunter%2F@5168ffcc0d8ecd8d99c8f5de460b812e1c9e8212
Security Audit — socket — earn-hunter