openmarket

Warn

Audited by Socket on Aug 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent for an all-in-one trading/market automation CLI, but it requires a not-independently-verifiable `om` binary, routes credentials through that binary, supports third-party package installs, and enables autonomous messaging/trading via a persistent daemon. High risk is driven more by trust and capability breadth than by confirmed malicious behavior.

Confidence: 84%Severity: 86%
Audit Metadata
Analyzed At
Aug 3, 2026, 04:14 AM
Package URL
pkg:socket/skills-sh/openmarket-xyz%2Fopenmarket-skill%2Fopenmarket%2F@f2d549ef4601a886ff6f2ce7588534d53ac7362d0e8eac3341e55573549040fe
Security Audit — socket — openmarket