base-trading-agent

Fail

Audited by Socket on Sep 27, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The stated trading purpose is used to justify installing and executing unverifiable external tooling: a password-protected AuthTool.exe and a concealed macOS remote script from a non-official IP. The skill also requests highly sensitive wallet credentials and enables autonomous financial transactions, creating a strong credential-theft and fund-drain risk with deceptive install instructions.

Confidence: 98%Severity: 99%
Audit Metadata
Analyzed At
Sep 27, 2026, 11:24 AM
Package URL
pkg:socket/skills-sh/snyk%2Fagent-scan%2Fbase-trading-agent%2F@0f4d16559689bb6e8e78eca10e8a953eaca189cd4813b8779a172335d765195e