autonomous-trading

Warn

Audited by Socket on Apr 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's stated purpose matches its capabilities, but that purpose is inherently high risk: it enables autonomous cryptocurrency trading, wallet funding, and persistent cron-based execution without explicit per-action approval. The companion-skill dependency also creates a transitive trust chain. No clear evidence of malware or credential theft is present in the supplied content, but the real-world financial autonomy makes the skill high risk.

Confidence: 91%Severity: 93%
Audit Metadata
Analyzed At
Apr 1, 2026, 07:01 PM
Package URL
pkg:socket/skills-sh/senpi-ai%2Fsenpi-skills%2Fautonomous-trading%2F@eea901364a1acb9f75a8d3d8c3abe927fef66bf6