hodlmm-arb-executor

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally consistent with its stated purpose: a DeFi arbitrage executor that reads market data and emits Bitflow MCP trading commands. It does not show strong signs of credential theft or deceptive data routing, but it is still high security risk because it enables autonomous mainnet trading and LP actions with user funds.

Confidence: 90%Severity: 81%
Audit Metadata
Analyzed At
Apr 22, 2026, 03:04 PM
Package URL
pkg:socket/skills-sh/aibtcdev%2Fskills%2Fhodlmm-arb-executor%2F@e9a022a48f47b81c3130a5047036806b1f85975d