stock-announcement-analysis

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core announcement-analysis workflow is purpose-aligned and mostly uses official data sources, but the embedded Tushare token, insecure HTTP example, rate-limit evasion guidance, and transitive dependence on external browser tooling make the skill higher risk than a normal documentation-only workflow.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Jun 25, 2026, 12:52 AM
Package URL
pkg:socket/skills-sh/kekewater%2Fhermes-skills%2Fstock-announcement-analysis%2F@600991c4311f26a2835eb59ddb98584ecdd5c274c98ce98319d3f103a32c3008