moonpay-trading-automation

Warn

Audited by Socket on Mar 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned and does not show obvious credential theft or exfiltration, but it enables unattended cryptocurrency trading via scheduled shell scripts. Because it authorizes autonomous real-world financial actions with persistent execution, the overall risk is high despite otherwise coherent scope.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Mar 25, 2026, 04:59 PM
Package URL
pkg:socket/skills-sh/moonpay%2Fskills%2Fmoonpay-trading-automation%2F@a91d232fa4d7c38f21483f0fa182d7af5c1866af