bison-strategy
Warn
Audited by Socket on May 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s capabilities broadly match its stated purpose as a crypto trading strategy, so this is not confirmed malware. However, it enables autonomous live trading with real financial impact and relies on privately distributed Senpi runtime/helper components whose provenance is not independently verifiable from public package sources, creating high security risk despite limited evidence of outright credential theft or exfiltration.
Confidence: 81%Severity: 78%
Audit Metadata