shipp-sports-data

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent, and Shipp/MoonPay endpoints appear same-org and officially documented, so this is not clear malware. However, its footprint goes beyond sports data into autonomous wallet funding, trading, signing, and offramp actions, creating high real-world financial risk disproportionate to a typical data skill.

Confidence: 91%Severity: 79%
Audit Metadata
Analyzed At
Mar 27, 2026, 03:35 AM
Package URL
pkg:socket/skills-sh/moonpay%2Fskills%2Fshipp-sports-data%2F@5bba26a8019092ddbbd28d94f560e4bffc6a7924