alpaca-trading-mcp-server

Warn

Audited by Socket on May 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN with elevated risk. The skill is internally consistent: it installs Alpaca's official MCP server from verifiable sources, uses only Alpaca credentials, and routes data to Alpaca-related services. The main risk is inherent to the skill's purpose: it enables AI-driven financial trading, including live trades with real money, so overall security risk is medium-high despite low evidence of malicious intent.

Confidence: 92%Severity: 72%
Audit Metadata
Analyzed At
May 17, 2026, 10:22 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fmcp-skills%2Falpaca-trading-mcp-server%2F@a6b90b1fb14f3242f6db282599d618d91a6634be
Security Audit — socket — alpaca-trading-mcp-server