serenity-unified-skill

Warn

Audited by Socket on Jun 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The main skill is a benign-looking investment research framework and its stated purpose broadly matches its core content, but optional executable data-enhancement modules introduce third-party code execution and possible token forwarding that are disproportionate to a pure methodology guide. No confirmed malware or credential theft is visible, yet the external-script trust boundary is weak enough to rate this as medium risk rather than benign.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Jun 27, 2026, 04:21 AM
Package URL
pkg:socket/skills-sh/yux1azhengye%2FBestSerenitySkillFromAT%2Fserenity-unified-skill%2F@1eeb91f10f1e7781797f2b2c9fc6fffadb1bdc37
Security Audit — socket — serenity-unified-skill