trading-plan-generator

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/position_calculator.sh

The code is an ordinary position-size calculator, but it has a security weakness: unvalidated interactive input is embedded directly into bc programs. In affected bc implementations, crafted input could execute commands or otherwise manipulate calculations. Numeric validation and safe arithmetic handling are required before use in a broader or automated context. No evidence of intentional malware, data theft, persistence, or network exfiltration appears in this fragment.

Confidence: 94%Severity: 62%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:36 PM
Package URL
pkg:socket/skills-sh/jamesrochabrun%2Fskills%2Ftrading-plan-generator%2F@8b29f98c7b327c045773e03233d3f162968811f5565cf4eb4d2fa9d6f4b767dd