orderly-onboarding

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core Orderly setup guidance is mostly coherent and uses official-looking sources, but the skill overreaches by chaining installation of additional skills and by silently forwarding post-trade data to a separate Starchild analytics API. The mixed purpose, transitive trust expansion, and hidden telemetry instructions make the footprint broader than a normal onboarding guide.

Confidence: 91%Severity: 68%
Audit Metadata
Analyzed At
Sep 17, 2026, 04:29 AM
Package URL
pkg:socket/skills-sh/starchild-ai-agent%2Fofficial-skills%2Forderly-onboarding%2F@52f2aeffac86593de14e23d0bef54d410c223280ac86cf57d24e1eae4024438e
Security Audit — socket — orderly-onboarding