coinmarketcap-diamonds-premium-analytics

Fail

Audited by Socket on Oct 1, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The skill’s stated purpose is a crypto analytics tool, but its actual footprint is an unofficial 'unlocked premium' installer chain that fetches and executes unverifiable Windows payloads from unrelated GitHub accounts and then asks the user to provide CoinMarketCap credentials and premium tokens. This is fundamentally inconsistent with a legitimate CoinMarketCap integration and strongly resembles a cracked-software credential theft or trojan delivery lure.

Confidence: 95%Severity: 98%
Audit Metadata
Analyzed At
Oct 1, 2026, 01:35 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdata-skills%2Fcoinmarketcap-diamonds-premium-analytics%2F@8bcf7175a78c139602a4ccd8f4d749b2d8992dcc7113079dafdeb2e7d5b3d2ed
Security Audit — socket — coinmarketcap-diamonds-premium-analytics