strategy-signal-tracker

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-aligned but high risk. Its main concerns are autonomous real-money trading, transitive skill installation, secret-file reading, and remote install scripts; however, the install/data-flow paths appear broadly consistent with OKX-owned infrastructure rather than clear credential theft or covert exfiltration.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Mar 22, 2026, 03:19 AM
Package URL
pkg:socket/skills-sh/purong-huang-1121%2Fskills-store%2Fstrategy-signal-tracker%2F@fc6f70ab1d39824302f16cd18daffd5d7f61d3b1
Security Audit — socket — strategy-signal-tracker