strategy-grid-trade
Warn
Audited by Socket on Mar 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The trading purpose is plausible, but the actual footprint is not proportionate: it performs autonomous financial actions, installs additional skills, and fetches core runtime components via `curl | sh` from an unrelated personal GitHub repo. Because an unverifiable trading binary is installed and then given access to a logged-in wallet environment, this skill carries high security risk even without proof of explicit malware.
Confidence: 91%Severity: 93%
Audit Metadata