mt5-trading

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is purpose-aligned for MT5 trading and uses mostly normal PyPI installs, so there is no clear malware or credential-harvesting pattern. However, it enables autonomous financial trading, references unspecified outbound channels (Telegram/GitHub), and leaves key execution pieces like START_BOT.cmd and repository provenance undefined, creating meaningful operational and security risk.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:52 PM
Package URL
pkg:socket/skills-sh/epinvest516-web%2Fopenclaw-skills%2Fmt5-trading%2F@33e81be3f170f8255780408ef6b18bb3842190742c3fb84cbfde1d0aa4e9bbc6