aster-api-spot-auth-v3
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileThe skill presents a coherent authentication mechanism for a testnet API using EIP-712 signatures, which is appropriate for wallet-based trading endpoints. However, the footprint requires careful secure key management, explicit transport and logging safeguards, and robust nonce/domain handling to avoid credential leakage and replay risks. The design trades legitimate functionality for potential surface area leaks if private keys or signed payloads are mishandled, and there is insufficient detail on security controls. Overall, the capability aligns with its stated purpose but is moderately risky in terms of credential handling and data exposure; it should be considered SUSPICIOUS to HIGH-RISK until secure key-management practices and explicit data-protection measures are documented and enforced.