skills/alphagbm/skills/alphagbm-vol-smile/Socket

alphagbm-vol-smile

Warn

Audited by Socket on Apr 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s purpose and requested credential are proportionate, and there is no installer or executable payload. However, the main API key is routed to a zeabur.app hosted endpoint that could not be verified as AlphaGBM’s official documented API domain, so the data flow is weaker than expected for a benign finance API skill.

Confidence: 82%Severity: 56%

Audit Metadata

Analyzed At

Apr 17, 2026, 11:43 AM

Package URL

pkg:socket/skills-sh/AlphaGBM%2Fskills%2Falphagbm-vol-smile%2F@479a443794570e6f1296eb5454640f60570e26ba