nse-trading-toolkit
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core analysis workflow is coherent for a trading skill, and the yfinance install is standard. Risk rises because the skill encourages optional broker and market-data MCP integrations without pinning exact trusted implementations, includes a personal GitHub TradingView MCP, and can extend to autonomous trade execution via Groww MCP. This is not confirmed malware, but it is a high-risk trading workflow with notable supply-chain and real-world action concerns.
Confidence: 87%Severity: 74%
Audit Metadata