minara

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Minara skill documentation presents a coherent, purpose-aligned tool for crypto trading and wallet management. It maintains appropriate user consent for fund-moving actions and relies on standard, verifiable install sources (npm) and documented authentication flows. While credential handling introduces typical security considerations (secure storage of MINARA_API_KEY, cautious exposure in logs/UI), there is no evidence of improper data exfiltration, third-party credential forwarding, or supply-chain abuse within the provided material. Overall, the footprint is benign-to-moderately cautious, given the financial capabilities described and the explicit confirmation steps required for sensitive actions.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 11:11 AM
Package URL
pkg:socket/skills-sh/minara-ai%2Fskills%2Fminara%2F@d775faed2f1946580c2f9d9cabf70579861ea3cb