binance-futures-signal-bot
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's trading, exchange credentials, and webhook/Telegram inputs fit its stated purpose, but the trust chain does not: ara.so publishes the skill while installation points to an unrelated, currently unverifiable GitHub repo with unpinned pip dependencies. It also enables autonomous leveraged trading with real financial impact, making the overall security risk high even without clear evidence of credential exfiltration.
Confidence: 91%Severity: 86%
Audit Metadata