Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed crypto API wrapper, but its artifacts overpromise trading/security capabilities and paid network use is not scoped clearly enough.
Review this before installing if you expect reliable trading, audit, or wallet-risk analysis. Treat outputs as third-party market data, not financial or security advice, and require explicit confirmation before any paid x402 endpoint is used.
The skill description materially overclaims capabilities, including unsupported analytics and broad 'free tier' access while several functions are premium-gated. In an agent setting, this can mislead routing and trust decisions, causing the model or user to rely on nonexistent or paid-only security, trading, or audit features and potentially make unsafe financial or security decisions based on incomplete coverage.
The README prominently advertises network-backed commands and x402 micropayment usage, including paid commands with per-call prices, but does not provide an explicit safety warning that running the script will contact external services and may trigger charges. In an agent/automation context, this omission increases the risk of unintended outbound requests and unexpected spending, especially if users assume commands are local or harmless previews.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
./scripts/fia_signals.sh help
### Step 2 — Create a zip or push to GitHub
```bash
# Option A: zip
The skill advertises executable usage via a local shell script and external API access, but it does not declare any explicit tool scope such as allowed shell or network permissions. That omission weakens policy enforcement and review because an agent may invoke network and shell capabilities without a clearly documented boundary, increasing the chance of unintended command execution or data egress.
No suspicious patterns detected.