opentrade-gateway
Warn
Audited by Socket on Mar 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is mostly coherent with its stated blockchain gateway purpose, and the installer appears same-org and checksum-verified. However, it still uses a remote curl|sh installer, forwards API credentials to an external CLI/service, and enables autonomous on-chain broadcasting of signed transactions, making it medium risk rather than benign.
Confidence: 88%Severity: 58%
Audit Metadata