market-monitor

Warn

Audited by Socket on Jun 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s monitoring purpose is plausible and mostly read-only, but the declared Binance API key appears unnecessary for public market data, OKX support is under-specified, and the claimed audit gateway introduces an opaque data path. With the impl files missing, credential routing and official endpoint use cannot be verified.

Confidence: 80%Severity: 52%
Audit Metadata
Analyzed At
Jun 23, 2026, 06:07 AM
Package URL
pkg:socket/skills-sh/storyclaw-official%2Fstoryclaw-assistant%2Fmarket-monitor%2F@8613b48092cefcd2a091eb861236a6d34cf05739b988f3c56e7f157ba11ffed8
Security Audit — socket — market-monitor