skills/senpi-ai/senpi-skills/condor-strategy/Socket

condor-strategy

Warn

Audited by Socket on Apr 26, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's trading behavior matches its stated purpose, and the download source appears same-org and legitimate, so this is not confirmed malware. However, it enables autonomous leveraged trading with significant capital allocation and installs executable strategy files from an unpinned remote branch, making the overall skill high risk.

Confidence: 90%Severity: 78%

Audit Metadata

Analyzed At

Apr 26, 2026, 05:45 AM

Package URL

pkg:socket/skills-sh/Senpi-ai%2Fsenpi-skills%2Fcondor-strategy%2F@1214aab6b93c0b84475af5286878a988956aeca7