cremonix-signals

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Cremonix trading signals skill appears coherent with its stated purpose of providing BTC/ETH regime intelligence and ML-powered entry signals across free and paid tiers. It relies on standard HTTP(S) endpoints and conventional API-key-based authentication, with local configuration for the agent. There are no unverifiable binaries or suspicious external downloads, and data flows align with official endpoints. Credential handling is present but normal for an API-based service and should be guarded to avoid leakage in logs. Overall, the footprint is proportionate and believable for a trading-signal integration; I categorize this as BENIGN with caution advised around secret management.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 01:19 AM
Package URL
pkg:socket/skills-sh/cremonix%2Fcremonix-regime-intelligence%2Fcremonix-signals%2F@dd3982188b793b439677f7f9b043a6aeed1fb134