trading-analysis
Warn
Audited by Socket on May 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s core purpose is coherent for trading analysis, but it gives multiple subagents Bash access, relies on opaque local scripts from absolute paths, processes untrusted external news, and culminates in concrete financial recommendations and sizing. The biggest risk is autonomous investment decision-making rather than confirmed malware or credential theft.
Confidence: 81%Severity: 78%
Audit Metadata