hedgefund-blackrock-portfolio
Warn
Audited by Socket on Aug 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is coherent for a portfolio-planning skill, but its actual footprint depends on opaque local/internal engines and a loosely specified TradingView MCP trust boundary. There is no confirmed malware or credential harvesting, yet the unverifiable dependency chain and unclear external data path make the skill high-risk to execute as written.
Confidence: 84%Severity: 72%
Audit Metadata