equity-research-analyst

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose and capabilities mostly align for equity research, and it does not install software or request disproportionate secrets. The main concern is data-flow integrity: core market-data requests and the RAPIDAPI_KEY are routed through a third-party RapidAPI/TradingView-proxy service rather than an official TradingView endpoint, plus web-search fallback brings untrusted content into the workflow. This is not confirmed malware, but it carries moderate security risk due to intermediary credential routing and external-content exposure.

Confidence: 87%Severity: 52%
Audit Metadata
Analyzed At
May 19, 2026, 06:53 PM
Package URL
pkg:socket/skills-sh/hypier%2Fequity-research-analyst-skill%2Fequity-research-analyst%2F@23798d096521c55edff39b6f5cb0dc7e6b86ec95
Security Audit — socket — equity-research-analyst