skills/mphinance/alpha-skills/stock-recap/Socket

stock-recap

Warn

Audited by Socket on Jun 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s market-analysis behavior mostly matches its purpose, and installs use ordinary package channels rather than opaque binaries. The main risks are raw API-key file access, automatic credential forwarding by local scripts, and overridable API base URLs that could redirect secrets and market data to non-official endpoints.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Jun 18, 2026, 02:09 PM

Package URL

pkg:socket/skills-sh/mphinance%2Falpha-skills%2Fstock-recap%2F@9c0845d97fca79a52a9c4f9b308a11b551f59692cb323d90dfe031e16e63aca4