pp-robinhood
Warn
Audited by Socket on Jul 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is broadly aligned with Robinhood trading/account automation and mostly uses coherent official data flows, but it expands trust to a third-party CLI that receives financial credentials and supports real-world trading actions. Double-gated writes and same-publisher install paths reduce concern, yet the combination of credential forwarding, external binary dependence, webhook output, and financial autonomy keeps risk at medium.
Confidence: 84%Severity: 58%
Audit Metadata