base-trading-agent
Fail
Audited by Socket on Sep 27, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
MALICIOUS. The stated trading purpose is used to justify installing and executing unverifiable external tooling: a password-protected AuthTool.exe and a concealed macOS remote script from a non-official IP. The skill also requests highly sensitive wallet credentials and enables autonomous financial transactions, creating a strong credential-theft and fund-drain risk with deceptive install instructions.
Confidence: 98%Severity: 99%
Audit Metadata