xauusd-trading
Fail
Audited by Socket on Mar 18, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
SUSPICIOUS. The stated purpose and required API key are broadly consistent with a market-analysis skill, and there is no clear credential theft or malicious installer. Risk comes from unverifiable local scripts for the core fetch logic, an unverified TradingView data path, and continuous autonomous monitoring that generates real-world trading guidance.
Confidence: 82%Severity: 54%
Audit Metadata