alphagbm-iv-rank

Warn

Audited by Socket on Apr 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and requested access are mostly coherent for IV analysis, and it lacks installers or broad permissions. However, the default API endpoint is a Zeabur-hosted domain rather than a clearly documented official AlphaGBM API domain, so the API key is routed to infrastructure whose publisher relationship was not verified. This makes the data flow trust model questionable, though not clearly malicious.

Confidence: 83%Severity: 61%
Audit Metadata
Analyzed At
Apr 17, 2026, 11:42 AM
Package URL
pkg:socket/skills-sh/AlphaGBM%2Fskills%2Falphagbm-iv-rank%2F@1c79119aabc55e825cce8fcdbf0b830eecc4c77a
Security Audit — socket — alphagbm-iv-rank