simmer

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent for a prediction-market trading agent, but it is high risk because it enables autonomous real-world financial trades, handles raw wallet keys, and promotes transitive installation of additional trading skills. I do not see clear credential-harvesting or covert exfiltration behavior from the text alone, so this looks more like a dangerous financial agent skill than confirmed malware.

Confidence: 89%Severity: 88%
Audit Metadata
Analyzed At
Mar 22, 2026, 07:20 PM
Package URL
pkg:socket/skills-sh/openclaw%2Fskills%2Fsimmer%2F@8f357361de71e47ffc2560726f435393877d150f