wtpy

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
references/tools-console.md

No malicious behavior is evident in the supplied documentation or Python example. The content describes legitimate monitoring and trading-management functionality. Security concerns include the publicly documented default administrator credential, possible use of plain HTTP, and an administrative scheduler capable of executing configured programs. These are deployment and access-control risks rather than evidence of malware. The default password should be changed, the service should be restricted and preferably placed behind HTTPS, and scheduler/configuration operations should be strongly authorized and audited.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 17, 2026, 09:48 AM
Package URL
pkg:socket/skills-sh/algoderiv%2Fagent-skills%2Fwtpy%2F@6a94d5f9c78f78c840b7e507f21d5eeaf47ea9afb9e812c1735767c543899870