purr-intelligence
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is purpose-aligned and routes data to service endpoints consistent with its stated trading role, but it enables autonomous cryptocurrency transactions and stores a permanent wallet API token after remote installer-based CLI setup. This is not confirmed malware, yet it is a high-risk financial automation skill with meaningful supply-chain and credential-handling concerns.
Confidence: 87%Severity: 82%
Audit Metadata