skills/marian2js/trading-skills/etoro/Socket

etoro

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

The skill is purpose-aligned and routes credentials to official eToro API endpoints, so it does not show clear malware or credential-harvesting behavior. However, it is inherently high risk because it enables real financial trades and public posting, and its hosted SKILL.md provenance is less verifiable than a signed release or official registry artifact.

Confidence: 88%Severity: 72%

Audit Metadata

Analyzed At

Mar 22, 2026, 07:06 AM

Package URL

pkg:socket/skills-sh/marian2js%2Ftrading-skills%2Fetoro%2F@346ad2ff1d14b4316391c697acca4900c0554072