aster-trading

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its stated trading purpose matches its capabilities, and the safety rules are proportionate, but it requires an external `aster-mcp` credential-handling CLI/MCP component whose provenance is not established here. Because the skill enables real-money trading and forwards API keys to that unverified tool, it should be treated as high security risk vulnerable content rather than confirmed malware.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Apr 18, 2026, 12:11 PM
Package URL
pkg:socket/skills-sh/kmshihab7878%2Fclaude-code-setup%2Faster-trading%2F@c91c8a17170287925f4ef7d36c848ee3e0e6fbac
Security Audit — socket — aster-trading