pp-robinhood

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with Robinhood trading/account automation and mostly uses coherent official data flows, but it expands trust to a third-party CLI that receives financial credentials and supports real-world trading actions. Double-gated writes and same-publisher install paths reduce concern, yet the combination of credential forwarding, external binary dependence, webhook output, and financial autonomy keeps risk at medium.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Jul 20, 2026, 11:01 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-robinhood%2F@1a26848a12ce0feeffc6c04433fd54230b0e6ade8486ce941e813a2e5b217cbd
Security Audit — socket — pp-robinhood