pionex-earn-arbitrage

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally consistent with its stated Pionex Earn Arbitrage purpose and uses an official same-org npm/CLI path, so it is not malware-like. However, it enables real financial transactions and forwards credentials to an installed CLI, making it a high-risk but largely coherent trading skill rather than a deceptive or clearly malicious one.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Jul 27, 2026, 08:18 AM
Package URL
pkg:socket/skills-sh/pionex-official%2Fpionex-skills%2Fpionex-earn-arbitrage%2F@18cf61e18a85986dd11956d3a0885f828cc26fc1c8c1fcc12e19a8262d89e1b7
Security Audit — socket — pionex-earn-arbitrage