almanak-strategy-builder

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent for DeFi strategy development, but its footprint is high risk because it enables autonomous financial transactions, requires a private key, includes transitive skill installation, and references a curl|bash installer. This is not confirmed malware, but it is a dangerous skill that should only run with strong user approval and minimal privileges.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Mar 14, 2026, 02:02 PM
Package URL
pkg:socket/skills-sh/almanak-co%2Fsdk%2Falmanak-strategy-builder%2F@8888b348f823158d4200dbf9a190417a10fd441d