hedgefund-bridgewater-risk

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The business purpose is coherent, and the requested data is proportionate to portfolio risk analysis, but the skill relies on unverifiable local executables/scripts and an underspecified TradingView MCP. Risk is driven by execution and transitive trust, not by clear malicious intent or credential theft behavior.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Aug 20, 2026, 02:23 PM
Package URL
pkg:socket/skills-sh/dzianisv%2Fnonfinancialadviceagents%2Fhedgefund-bridgewater-risk%2F@f2894e36a1a8463b5db6b0c0305ba3fded03ca541539ccfcd077964d71549903
Security Audit — socket — hedgefund-bridgewater-risk