sec-ticker-financials
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is plausible, but the skill’s footprint is broader than needed: it downloads and runs remote helper code, routes public SEC lookups through a third-party paid gateway, and asks the agent to expose a plaintext wallet private key to authorize spending. The payment flow and credential handling are disproportionate for a simple financial-data retrieval skill.
Confidence: 85%Severity: 83%
Audit Metadata