robinhood-mcp

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN for purpose alignment and official data flow, but HIGH operational risk because it allows a single irreversible real-money trade from natural-language instructions. No clear malware or credential-harvesting indicators are present; the main concerns are autonomous financial action and the read-only labeling mismatch.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Aug 20, 2026, 05:30 PM
Package URL
pkg:socket/skills-sh/aeonfun%2Faeon%2Frobinhood-mcp%2F@f62e3b6e79cb5a508f7809e01e4b0b3d5a580bf06aadaf9dc2f9351840c6f375
Security Audit — socket — robinhood-mcp