ai-trading-crew

Warn

Audited by Socket on May 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent for an AI trading framework, but it carries elevated risk because it can trigger broker actions, relies on several sensitive API keys, and may act on untrusted external content. No clear evidence of malware or credential harvesting is present; the main concern is high-impact autonomous trading capability and medium supply-chain trust from a personal GitHub repo.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
May 10, 2026, 12:56 AM
Package URL
pkg:socket/skills-sh/mahmoud20138%2FTradecraft%2Fai-trading-crew%2F@5c135deb3aa2bb7d633b5e0c2fa8451b2e2c2b85
Security Audit — socket — ai-trading-crew