stock-analysis
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core stock/crypto analysis, local storage, and public data fetching are consistent with the stated purpose, but the optional Twitter/X integration is a notable mismatch in trust: it recommends a deprecated third-party CLI and forwards full X/Twitter cookie credentials to it via undocumented APIs. That raises meaningful supply-chain and credential-handling risk without enough evidence to call the skill malicious overall.
Confidence: 90%Severity: 72%
Audit Metadata