ghost-auto-trader

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned, but its core purpose is high-risk autonomous trading. The main issue is not hidden exfiltration or malicious install behavior; it is enabling an AI agent to place live financial trades from externally influenced signals, with acknowledged prompt-injection exposure and transitive skill trust.

Confidence: 90%Severity: 86%
Audit Metadata
Analyzed At
Sep 4, 2026, 09:56 PM
Package URL
pkg:socket/skills-sh/mphinance%2Falpha-skills%2Fghost-auto-trader%2F@eddc5046d995ef7a76aa22e38ab8742e0d9e29a5199c06bdd80847a4880c4eb7
Security Audit — socket — ghost-auto-trader