crypto-report
Fail
Audited by Socket on Feb 15, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The provided descriptor is a benign usage document describing commands to run local shell scripts that obtain crypto market data and news. However, because the referenced scripts are not included and execution is delegated to arbitrary local shell code, this fragment poses a non-trivial supply-chain and runtime risk. Shell scripts have full access to the invoking user's environment and can exfiltrate credentials, run remote code, or create persistent backdoors. Do not execute these scripts on production or credentialed hosts without retrieving and auditing their contents, and run them first in a sandboxed environment with network and filesystem restrictions.
Confidence: 98%
Audit Metadata