crypto-trading
Warn
Audited by Socket on Oct 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s capabilities broadly match its stated trading purpose, and there is no visible malware pattern, installer abuse, or clear credential exfiltration in the provided text. However, it enables real-money crypto trading, including direct execution, which is inherently high impact for an AI agent. The actual provider connection endpoints, credential routing, and Traderton publisher legitimacy are not verifiable from the supplied skill, so trust and data-flow integrity remain unresolved. Main risk is autonomous real-world action rather than confirmed malicious behavior.
Confidence: 83%Severity: 72%
Audit Metadata