skills/storyclaw-official/talenthub/market-monitor/Socket

market-monitor

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose is a benign read-only market monitor, but the required Binance API key is disproportionate for public market-data access, and the undocumented gateway introduces unverifiable third-party data flow. Missing impl files prevent verification of whether credentials or requests are sent only to official Binance/OKX endpoints.

Confidence: 87%Severity: 64%

Audit Metadata

Analyzed At

Sep 12, 2026, 06:51 PM

Package URL

pkg:socket/skills-sh/storyclaw-official%2Ftalenthub%2Fmarket-monitor%2F@cd8992a44417ddb8249e50b95358a49032f7c9deb98f53184efaa5eca5f6e519