purr-intelligence

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned and routes data to service endpoints consistent with its stated trading role, but it enables autonomous cryptocurrency transactions and stores a permanent wallet API token after remote installer-based CLI setup. This is not confirmed malware, yet it is a high-risk financial automation skill with meaningful supply-chain and credential-handling concerns.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Apr 22, 2026, 02:23 AM
Package URL
pkg:socket/skills-sh/powxenv%2Fpurr%2Fpurr-intelligence%2F@f30deadee3da1fd1e4e4135d3ca8517e1f868599