minara
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileThe Minara skill documentation presents a coherent, purpose-aligned tool for crypto trading and wallet management. It maintains appropriate user consent for fund-moving actions and relies on standard, verifiable install sources (npm) and documented authentication flows. While credential handling introduces typical security considerations (secure storage of MINARA_API_KEY, cautious exposure in logs/UI), there is no evidence of improper data exfiltration, third-party credential forwarding, or supply-chain abuse within the provided material. Overall, the footprint is benign-to-moderately cautious, given the financial capabilities described and the explicit confirmation steps required for sensitive actions.