strategy-memepump-scanner

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-aligned for meme-token auto-trading, but it is high risk because it combines automatic shell-based installation, transitive skill loading, local credential/config access, and autonomous real-money trading without per-action confirmation. This looks more risky than malicious: no clear credential theft or exfiltration path is shown, but the operational footprint is powerful enough to warrant a suspicious/high-risk classification.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Mar 21, 2026, 08:32 AM
Package URL
pkg:socket/skills-sh/purong-huang-1121%2Fskills-store%2Fstrategy-memepump-scanner%2F@3298e634b7c7dd8f065017cb7fd1c50eb01c97bd