skills/starchild-ai-agent/community-skills/@2061/yield-optimizer/Socket

@2061/yield-optimizer

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill’s crypto capabilities match its stated purpose, but it enables autonomous on-chain financial actions and explicitly expands into other trusted skills for wallet and bridging operations. Install sources are partly normal, yet JavaScript dependency trust is unverifiable from the provided text. Main concern is high-impact autonomy and transitive skill trust, not confirmed malware.

Confidence: 90%Severity: 82%

Audit Metadata

Analyzed At

Mar 17, 2026, 06:29 AM

Package URL

pkg:socket/skills-sh/Starchild-ai-agent%2Fcommunity-skills%2Fyield-optimizer%2F@2d2d057d5e170b8dd091a401583f5ff0b1032f04