skills/mahmoud20138/tradecraft/gold-orb-ea/Socket

gold-orb-ea

Warn

Audited by Socket on May 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally consistent as an MT5 trading EA and shows no clear credential theft or exfiltration, but it enables autonomous financial trading and is distributed from a personal GitHub repo with limited provenance. Risk is driven more by real-world trading impact and moderate supply-chain trust than by confirmed malicious behavior.

Confidence: 90%Severity: 72%

Audit Metadata

Analyzed At

May 10, 2026, 12:56 AM

Package URL

pkg:socket/skills-sh/mahmoud20138%2FTradecraft%2Fgold-orb-ea%2F@fe6a3e2c0400c06f50e03abaec2efb0454c7a114