stock-cross-verify

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS rather than malicious. The stated purpose matches a stock-research orchestration skill, but its actual footprint relies heavily on multiple external skills and executables not provided here, including a bash script and several authenticated capture tools. Data flows are broadly consistent with research, yet the transitive trust and unverifiable executable dependencies make the security risk high even without clear evidence of credential theft or overt exfiltration.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:32 PM
Package URL
pkg:socket/skills-sh/kirkluokun%2Fawesome-a-stock-openclawskills%2Fstock-cross-verify%2F@7301ec55c593c17347d148f15f26b0cb596192f16fef6e25a35082cc8d38194d