investor-bernstein-intraday

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s trading-analysis purpose is mostly coherent, but its core live-data path depends on an unofficial community MCP that controls an authenticated browser session via CDP. There is no direct evidence of credential theft or malware, yet the third-party tool trust issue and real-world financial impact make this a medium-high risk skill.

Confidence: 86%Severity: 74%
Audit Metadata
Analyzed At
Aug 20, 2026, 02:23 PM
Package URL
pkg:socket/skills-sh/dzianisv%2Fnonfinancialadviceagents%2Finvestor-bernstein-intraday%2F@bf143a859798a8c4a016b9bd48e0e1ca0c0cba4fbd6c9da5fa74030f8e3d3f63
Security Audit — socket — investor-bernstein-intraday