crypto-trading

Warn

Audited by Socket on Oct 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s capabilities broadly match its stated trading purpose, and there is no visible malware pattern, installer abuse, or clear credential exfiltration in the provided text. However, it enables real-money crypto trading, including direct execution, which is inherently high impact for an AI agent. The actual provider connection endpoints, credential routing, and Traderton publisher legitimacy are not verifiable from the supplied skill, so trust and data-flow integrity remain unresolved. Main risk is autonomous real-world action rather than confirmed malicious behavior.

Confidence: 83%Severity: 72%
Audit Metadata
Analyzed At
Oct 24, 2026, 11:40 AM
Package URL
pkg:socket/skills-sh/traderton%2Fskills%2Fcrypto-trading%2F@5b46ed69129d75d6c4103925cf9db8501d608b6dc0fb98e2a69f6e2ce5ef8b4f