ghost-auto-trader
Warn
Audited by Socket on Sep 4, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is purpose-aligned, but its core purpose is high-risk autonomous trading. The main issue is not hidden exfiltration or malicious install behavior; it is enabling an AI agent to place live financial trades from externally influenced signals, with acknowledged prompt-injection exposure and transitive skill trust.
Confidence: 90%Severity: 86%
Audit Metadata