tradingview-reader

Warn

Audited by Socket on May 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is mostly aligned with its TradingView read-only purpose, but it requires installing external tooling and a GitHub-sourced plugin, enables CDP on the local app, and harvests TradingView session cookies for direct HTTP use. Those behaviors are proportionate enough to avoid a malicious classification, yet they create medium supply-chain and credential-handling risk beyond a typical documentation-only skill.

Confidence: 84%Severity: 64%
Audit Metadata
Analyzed At
May 10, 2026, 09:52 AM
Package URL
pkg:socket/skills-sh/himself65%2Ffinance-skills%2Ftradingview-reader%2F@4ba9b00d13df6d98bc7dc9369f67bffae171ae34