kodiak-strategy
Warn
Audited by Socket on Mar 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose and capabilities are internally consistent for an autonomous trading bot, but it is high risk because it enables recurring leveraged financial trades with limited user visibility and no explicit per-trade approval. Install trust is only partially verifiable: same-org Senpi references look legitimate, yet the required Senpi MCP runtime is not specified enough here to fully assess provenance.
Confidence: 87%Severity: 86%
Audit Metadata