skills/aradotso/hermes-skills/openfinclaw-quant-research/Socket

openfinclaw-quant-research

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s quant-research capabilities mostly match its stated purpose, but trust is weakened by dynamic npx execution, mutable @latest installs, API-key forwarding into third-party CLI code, and customizable API endpoints that could redirect data. This looks more like a medium-risk external service integration than confirmed malware.

Confidence: 82%Severity: 58%

Audit Metadata

Analyzed At

Jul 10, 2026, 08:40 PM

Package URL

pkg:socket/skills-sh/Aradotso%2Fhermes-skills%2Fopenfinclaw-quant-research%2F@3ad94233f8f24f15852068dd6edba908f7f5d90e4a9d49c63282298f8a74ef18