elfa

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the entry is coherent with its crypto/market-analysis purpose and appears publisher-aligned, but its primary function is to install additional remote skills and it promotes downstream autonomous trading capabilities. The main risk is transitive trust plus real-world financial automation, not confirmed malware in this onboarding entry.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 07:31 AM
Package URL
pkg:socket/skills-sh/Starchild-ai-agent%2Fofficial-skills%2Felfa%2F@2635dce116941f8121ff19ed123d271e0a6693f936fc1051a2a9795df71a1ef7
Security Audit — socket — elfa