investment

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally consistent and appears to use official GRVT infrastructure and a registry-published SDK, so it does not look malicious. However, it is still high risk operationally because it grants an AI agent the ability to perform real financial transactions using raw API keys and private keys.

Confidence: 89%Severity: 76%
Audit Metadata
Analyzed At
Apr 2, 2026, 12:41 AM
Package URL
pkg:socket/skills-sh/gravity-technologies%2Fgrvt-skills%2Finvestment%2F@cabea1c13a03b09b6ad8f55045c28f24525dcbae