find-next-crypto-idea

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core idea-generation workflow is coherent, but the skill adds telemetry that reads local config, writes persistent tracking files, and can POST usage metadata to a user-configured remote endpoint without validating domain ownership. No clear malware or installer abuse is present, yet the remote data flow is broader than necessary for the stated purpose.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Aug 1, 2026, 11:05 AM
Package URL
pkg:socket/skills-sh/Sarthib7%2Fagentsmith%2Ffind-next-crypto-idea%2F@883a501fdd85a93e907f884d310477040ccde6a70238fbdd8e544800167a1fc5
Security Audit — socket — find-next-crypto-idea