robinhood-mcp
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS due to high-impact financial action and an extra GitHub PAT dependency, but not malicious. The skill is largely coherent with its stated Robinhood trading purpose, uses Robinhood's official MCP endpoint, and includes meaningful guardrails; main residual risks are autonomous trade capability and trust in local refresh/notify helpers outside the provided skill.
Confidence: 89%Severity: 68%
Audit Metadata