xauusd-trading

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS. The stated purpose and required API key are broadly consistent with a market-analysis skill, and there is no clear credential theft or malicious installer. Risk comes from unverifiable local scripts for the core fetch logic, an unverified TradingView data path, and continuous autonomous monitoring that generates real-world trading guidance.

Confidence: 82%Severity: 54%
Audit Metadata
Analyzed At
Mar 18, 2026, 02:53 AM
Package URL
pkg:socket/skills-sh/huynguyen03dev%2Fxauusd-trading%2Fxauusd-trading%2F@2001dbc9f989b9dbcf688df55bbda654d56c2666