simmer-skill-builder

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose matches its behavior, but the footprint is high risk. It generates and publishes autonomous trading skills, converts untrusted external content into runnable code, and uses an unpinned `npx ...@latest` publish step. This looks more like a risky skill-generation and distribution pipeline than a narrowly scoped helper.

Confidence: 86%Severity: 84%
Audit Metadata
Analyzed At
Apr 7, 2026, 11:50 PM
Package URL
pkg:socket/skills-sh/spartanlabsxyz%2Fsimmer-sdk%2Fsimmer-skill-builder%2F@fb75d5008b772661a5d2c263c4471d684523e06b