market-sentiment-pulse
Warn
Audited by Socket on May 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is coherent, but the skill is installed through a third-party registry entry and explicitly asks the agent to load another skill, creating medium transitive-trust risk. No direct credential harvesting, exfiltration, or malicious data flow is evident from the provided text.
Confidence: 85%Severity: 56%
Audit Metadata