alpaca-trading-mcp-server
Warn
Audited by Socket on May 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
BENIGN with elevated risk. The skill is internally consistent: it installs Alpaca's official MCP server from verifiable sources, uses only Alpaca credentials, and routes data to Alpaca-related services. The main risk is inherent to the skill's purpose: it enables AI-driven financial trading, including live trades with real money, so overall security risk is medium-high despite low evidence of malicious intent.
Confidence: 92%Severity: 72%
Audit Metadata