stock-cross-verify
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS rather than malicious. The stated purpose matches a stock-research orchestration skill, but its actual footprint relies heavily on multiple external skills and executables not provided here, including a bash script and several authenticated capture tools. Data flows are broadly consistent with research, yet the transitive trust and unverifiable executable dependencies make the security risk high even without clear evidence of credential theft or overt exfiltration.
Confidence: 84%Severity: 78%
Audit Metadata