hedgefund-blackrock-portfolio

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent for a portfolio-planning skill, but its actual footprint depends on opaque local/internal engines and a loosely specified TradingView MCP trust boundary. There is no confirmed malware or credential harvesting, yet the unverifiable dependency chain and unclear external data path make the skill high-risk to execute as written.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Aug 20, 2026, 02:23 PM
Package URL
pkg:socket/skills-sh/dzianisv%2Fnonfinancialadviceagents%2Fhedgefund-blackrock-portfolio%2F@581081069cde9fac26944b07dd99451ea4d4a63976ecac49b2cbba6979a4b827
Security Audit — socket — hedgefund-blackrock-portfolio