trading

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated trading capabilities are coherent, but it routes brokerage credentials and high-impact trading actions through a third-party tasty-agent server/package not shown to be broker-owned. Because it enables live financial transactions and forwards sensitive account access to non-official intermediary code, overall security risk is high even though malicious intent is not confirmed.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Aug 27, 2026, 02:44 PM
Package URL
pkg:socket/skills-sh/ferdousbhai%2Ftasty-agent%2Ftrading%2F@955187626ba4e7bf1b3401c13bfa7e2e69055af5ff308ffc91143f498ff835cf
Security Audit — socket — trading