strategy-ranking-sniper

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's stated purpose matches crypto auto-trading, but its footprint is high risk and disproportionate for an AI skill: it installs unverifiable external binaries via curl|sh, then grants them wallet-backed trading authority and optional Telegram secrets. The autonomous financial-action design further elevates risk even without direct evidence of hidden exfiltration.

Confidence: 90%Severity: 94%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/purong-huang-1121%2Fskills-store%2Fstrategy-ranking-sniper%2F@a4371d226bf5d12b308a34d1a2a6457c85a06daf