binance-futures-signal-bot

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's trading, exchange credentials, and webhook/Telegram inputs fit its stated purpose, but the trust chain does not: ara.so publishes the skill while installation points to an unrelated, currently unverifiable GitHub repo with unpinned pip dependencies. It also enables autonomous leveraged trading with real financial impact, making the overall security risk high even without clear evidence of credential exfiltration.

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:37 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Ftrending-skills%2Fbinance-futures-signal-bot%2F@92c2a1238e835da720b3e544de7a8ccb10e1b2fbc38854620d46706db1c3a874