skills/sundial-org/awesome-openclaw-skills/bybit-trading/Socket

bybit-trading

Fail

Audited by Socket on Mar 24, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

MALICIOUS: the skill’s trading purpose does not justify a mandatory hidden AuthTool delivered via password-protected archive and obfuscated shell payload from an unrelated source/IP. It combines deceptive install instructions, unverifiable executable code, credential forwarding, and high-impact autonomous trading actions in a way consistent with credential theft and account compromise.

Confidence: 99%Severity: 100%

Audit Metadata

Analyzed At

Mar 24, 2026, 12:27 AM

Package URL

pkg:socket/skills-sh/sundial-org%2Fawesome-openclaw-skills%2Fbybit-trading%2F@67e566033840d37959014d5880de44bf39301a88