trading-analysis

Warn

Audited by Socket on May 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s core purpose is coherent for trading analysis, but it gives multiple subagents Bash access, relies on opaque local scripts from absolute paths, processes untrusted external news, and culminates in concrete financial recommendations and sizing. The biggest risk is autonomous investment decision-making rather than confirmed malware or credential theft.

Confidence: 81%Severity: 78%
Audit Metadata
Analyzed At
May 2, 2026, 05:02 PM
Package URL
pkg:socket/skills-sh/lucemia%2Ftrading-agents-plugin%2Ftrading-analysis%2F@bd91e4236bde32dc8a113d828016d6f45aa0d1c5
Security Audit — socket — trading-analysis