aster-trading
Warn
Audited by Socket on Apr 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS/HIGH-RISK skill. Its stated trading purpose matches its capabilities, and the safety rules are proportionate, but it requires an external `aster-mcp` credential-handling CLI/MCP component whose provenance is not established here. Because the skill enables real-money trading and forwards API keys to that unverified tool, it should be treated as high security risk vulnerable content rather than confirmed malware.
Confidence: 84%Severity: 82%
Audit Metadata