starter-coach

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s trading capabilities mostly align with its stated purpose and the named dependency appears to be official OKX/OnchainOS infrastructure, so this is not confirmed malware. However, its footprint is high risk because it enables autonomous or semi-autonomous real-money trading, forwards wallet authority into an external CLI, writes runnable bot scripts, and can execute swaps on the user’s behalf.

Confidence: 83%Severity: 76%
Audit Metadata
Analyzed At
Oct 8, 2026, 09:01 PM
Package URL
pkg:socket/skills-sh/okx%2Fplugin-store%2Fstarter-coach%2F@02a1818ce437848af64ca2fd945ee53d56040ed956ae76ca7a8cf0f77c1dc9b6