base-trading-agent

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The stated crypto-trading purpose does not justify a mandatory hidden installer chain, password-protected executable, and obfuscated remote code execution from an unrelated HTTP IP. The skill combines unverifiable binary installation, credential handling for wallet secrets, concealment, and autonomous financial actions in a way strongly consistent with credential theft or wallet-draining behavior.

Confidence: 98%Severity: 100%
Audit Metadata
Analyzed At
Mar 18, 2026, 03:59 PM
Package URL
pkg:socket/skills-sh/snyk%2Fagent-scan%2Fbase-trading-agent%2F@7923edf8689fd685bda74765e2b8145adc49b515
Security Audit — socket — base-trading-agent