stock-analysis

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core stock/crypto analysis, local storage, and public data fetching are consistent with the stated purpose, but the optional Twitter/X integration is a notable mismatch in trust: it recommends a deprecated third-party CLI and forwards full X/Twitter cookie credentials to it via undocumented APIs. That raises meaningful supply-chain and credential-handling risk without enough evidence to call the skill malicious overall.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Sep 19, 2026, 02:21 AM
Package URL
pkg:socket/skills-sh/kirkluokun%2Fawesome-a-stock-openclawskills%2Fstock-analysis%2F@f88ee4a461810d456579737d221dcbf27b9f01bc80ec18e9fcb53313c883ef04