skills/purong-huang-1121/plugin-store/strategy-grid-trade/Socket

strategy-grid-trade

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's purpose matches trading, but its footprint is high risk: repeated remote script execution, transitive skill installation, full env-file reading, and most importantly autonomous real-world trading without explicit per-trade approval. Same-org OKX sourcing reduces likelihood of outright malware, but this is still a dangerous skill to grant an agent.

Confidence: 90%Severity: 85%

Audit Metadata

Analyzed At

Sep 17, 2026, 07:53 AM

Package URL

pkg:socket/skills-sh/purong-huang-1121%2Fplugin-store%2Fstrategy-grid-trade%2F@e7e25b6777173fef26c1ea30d144c8f40fcbb176ba837a5be00c3bcf8ddf75fd