Bankr Dev - Automation

Fail

Audited by Socket on Feb 15, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The provided fragment is a high-level specification (not executable code) for a powerful financial automation capability. No explicit malicious code or obfuscation is present in the text fragment itself. However, because the fragment omits where and how credentials and network calls are handled and refers to external modules (which likely contain the sensitive implementation), it poses a non-trivial supply-chain risk: a compromised implementation of the referenced client or scheduler could harvest credentials or place unauthorized trades. Before trusting this skill, demand full implementation details, endpoints, credential handling practices, and audits of dependent packages and scheduler services.

Confidence: 98%
Audit Metadata
Analyzed At
Feb 15, 2026, 06:46 PM
Package URL
pkg:socket/skills-sh/BankrBot%2Fclaude-plugins%2Fbankr-dev-automation%2F@d77423c178b28668439a98148c200391660fe4db