robinhood-mcp

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS due to high-impact financial action and an extra GitHub PAT dependency, but not malicious. The skill is largely coherent with its stated Robinhood trading purpose, uses Robinhood's official MCP endpoint, and includes meaningful guardrails; main residual risks are autonomous trade capability and trust in local refresh/notify helpers outside the provided skill.

Confidence: 89%Severity: 68%
Audit Metadata
Analyzed At
Oct 9, 2026, 03:35 PM
Package URL
pkg:socket/skills-sh/aeonfun%2Faeon%2Frobinhood-mcp%2F@e27e13eff526ad6609d4103c2360aa35f90cf08cbbe313e7231b3eefe1af0917