aster-api-spot-trading-v1
Fail
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's stated purpose (placing, canceling, and querying spot orders on the Aster Spot API v1) aligns with its described endpoints and signed authentication model. The footprint is typical for a trading integration and is not inherently malicious. However, the lack of explicit credential storage/handling details and error handling introduces security and reliability concerns. Treat as BENIGN with caution; focus on secure credential management, input validation, and robust error handling to avoid misorders or credential exposure.
Confidence: 98%
Audit Metadata