skills/kevinzai/cc-commander/trading-analysis/Socket

trading-analysis

Warn

Audited by Socket on Apr 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated trading-analysis purpose is coherent, but the actual footprint relies on an unverified third-party yf CLI and an undocumented localhost Polymarket bridge. No clear credential harvesting or exfiltration is present, so this is not confirmed malware, but the install/provenance and external-content handling risks make it a medium-risk skill.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Apr 8, 2026, 02:32 PM

Package URL

pkg:socket/skills-sh/KevinZai%2Fcc-commander%2Ftrading-analysis%2F@a8d153d082238cb37746af08e908556b1e709265