trading
Warn
Audited by Socket on Aug 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s stated trading capabilities are coherent, but it routes brokerage credentials and high-impact trading actions through a third-party tasty-agent server/package not shown to be broker-owned. Because it enables live financial transactions and forwards sensitive account access to non-official intermediary code, overall security risk is high even though malicious intent is not confirmed.
Confidence: 84%Severity: 78%
Audit Metadata