senpi-trading-runtime

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-consistent for a trading runtime, and its main network flows appear to use official/local endpoints. However, it grants an AI agent the ability to execute real financial actions, read local trading credentials from disk/env, create strategy wallets, and operate long-running daemons; this makes it high security risk even without strong evidence of malware or credential exfiltration to unrelated parties.

Confidence: 89%Severity: 86%
Audit Metadata
Analyzed At
May 15, 2026, 05:02 PM
Package URL
pkg:socket/skills-sh/Senpi-ai%2Fsenpi-skills%2Fsenpi-trading-runtime%2F@e2367033fdca1b822c7f0ae7cb9e57f369da10f1