scorpion-strategy

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned as an automated trading strategy, but it enables autonomous financial transactions with recurring order placement and uses external runtime tooling whose provenance is not established here. No strong evidence of credential theft or covert exfiltration is present, so this is high-risk automation rather than confirmed malware.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Apr 16, 2026, 05:56 PM
Package URL
pkg:socket/skills-sh/Senpi-ai%2Fsenpi-skills%2Fscorpion-strategy%2F@e888685762772da20c8a4982e50ac213eb338668