skills/acaprino/alfio-claude-plugins/mt5-trading/Socket

mt5-trading

Warn

Audited by Socket on May 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core MT5 capability aligns with the stated purpose and the official MetaTrader5 package is verifiable, but the skill also facilitates autonomous trading and recommends optional third-party components that can receive trading credentials. This is not confirmed malware, yet it is a high-impact skill with meaningful supply-chain and credential-forwarding risk.

Confidence: 89%Severity: 74%

Audit Metadata

Analyzed At

May 10, 2026, 03:16 AM

Package URL

pkg:socket/skills-sh/acaprino%2Falfio-claude-plugins%2Fmt5-trading%2F@b8b6f33744ee13f84aa95e253f4b0700d07e5d84