skills/starchild-ai-agent/community-skills/@349/binance/Socket

@349/binance

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is purpose-aligned for Binance trading and uses an official registry dependency, but it grants an AI agent the ability to execute real trades and forwards exchange credentials into third-party/local code that is not fully visible here. This is not clear malware, yet it is a high-impact financial automation skill with moderate trust and credential-handling risk.

Confidence: 84%Severity: 68%

Audit Metadata

Analyzed At

Mar 13, 2026, 12:21 PM

Package URL

pkg:socket/skills-sh/Starchild-ai-agent%2Fcommunity-skills%2Fbinance%2F@175bab3411a990ce2df06bc814fce12a7039468a