skills/senpi-ai/senpi-skills/spider-strategy/Socket

spider-strategy

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's trading behavior matches its stated purpose, but it enables autonomous real-money portfolio actions and depends on external runtime/repo trust that is only partially verified. Main risk is financial autonomy and third-party execution trust, not clear malware or credential theft.

Confidence: 83%Severity: 74%

Audit Metadata

Analyzed At

May 15, 2026, 10:53 AM

Package URL

pkg:socket/skills-sh/Senpi-ai%2Fsenpi-skills%2Fspider-strategy%2F@17c145fb161ddcc821e048b3151d6d26161e1f89