openfinclaw-quantitative-research
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities broadly fit its stated quant-research purpose, and it uses a normal npm distribution path rather than opaque binaries. However, trust is weakened by third-party publisher mismatch, mutable npx @latest execution, endpoint inconsistencies, and forwarding a unified API key plus strategy/query data through vendor gateway services. The footprint is plausible for the purpose but not fully trustworthy or tightly provenance-verified.
Confidence: 88%Severity: 63%
Audit Metadata