strategy-grid-trade

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The trading purpose is plausible, but the actual footprint is not proportionate: it performs autonomous financial actions, installs additional skills, and fetches core runtime components via `curl | sh` from an unrelated personal GitHub repo. Because an unverifiable trading binary is installed and then given access to a logged-in wallet environment, this skill carries high security risk even without proof of explicit malware.

Confidence: 91%Severity: 93%
Audit Metadata
Analyzed At
Mar 20, 2026, 04:22 AM
Package URL
pkg:socket/skills-sh/purong-huang-1121%2Fskills-store%2Fstrategy-grid-trade%2F@31278d08bf08449abf9fce849a269b3b98146758
Security Audit — socket — strategy-grid-trade