blockfill-agent-execution
Warn
Audited by Socket on Aug 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
High-risk vulnerable skill. Its trading capability matches the stated purpose, but the footprint is risky: a bundled opaque executor binary receives exchange credentials, can take autonomous real-money trading actions, and the documented hardcoded qtex endpoint conflicts with the no-third-party-routing claim. Proxying through sc-vpn or arbitrary proxies further weakens data-flow integrity.
Confidence: 85%Severity: 90%
Audit Metadata