nse-trading-toolkit

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core analysis workflow is coherent for a trading skill, and the yfinance install is standard. Risk rises because the skill encourages optional broker and market-data MCP integrations without pinning exact trusted implementations, includes a personal GitHub TradingView MCP, and can extend to autonomous trade execution via Groww MCP. This is not confirmed malware, but it is a high-risk trading workflow with notable supply-chain and real-world action concerns.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:15 AM
Package URL
pkg:socket/skills-sh/bhala-srinivash%2Fnse-trading-skills%2Fnse-trading-toolkit%2F@95f80be12f14e35e4b7b7d4f902779eabac6bb56a7c5c8971e52f1974f8f42cd