OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 30, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates cryptocurrency trading but contains significant security flaws. A command injection vulnerability in one of the scripts allows for arbitrary code execution. Furthermore, the skill includes a bypass for its own 'ironclad' user-confirmation rules, and it performs runtime package installations and sensitive file searches.
Detected behaviors
1 alert: gptAnomaly
3 issues
7/9 files flagged
Score: 93/100 · 2 sections analyzed