openclawby-skills

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s capabilities broadly match its stated purpose, but it combines centralized relay access with high-value exchange credentials and real-world trade execution. Same-org hosting lowers concern, yet unmanaged ZIP installation, unclear connector provenance, and the ability to act on private keys make the overall risk medium rather than benign.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:51 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fopenclawby-skills%2F@7ed4a2372f1ea38129ae5b85168d1f7a598caeaacfd121f1ccc11959052247fa
Security Audit — socket — openclawby-skills