earn
Warn
Audited by Socket on Mar 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core purpose and official KuCoin API data flow are mostly coherent, with no third-party routing or installer risk. However, the skill over-normalizes raw secret handling through plaintext files, suggests concealed local secret storage, includes inline account credential placeholders, and overstates auth requirements for at least one public endpoint; these make the footprint broader than necessary for a read-only Earn query skill.
Confidence: 89%Severity: 56%
Audit Metadata