alpha

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Binance Alpha Skill appears to be a coherent tool for querying both public and authenticated Binance endpoints with appropriate handling of API credentials (masked displays, user confirmations for sensitive actions). There are no evident download/install chains or external binaries, and data flows align with expected API interactions. A minor concern is ensuring credentials never appear in logs or shared transcripts and that storing account metadata in TOOLS.md remains access-controlled. Overall, the risk profile is low to moderate (benign with cautious handling of credentials).

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 09:33 AM
Package URL
pkg:socket/skills-sh/binance%2Fbinance-skills-hub%2Falpha%2F@ea103385f07587445298840e04c4812ae1ffd3e6