openfinclaw-quantitative-research

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s capabilities broadly fit its stated quant-research purpose, and it uses a normal npm distribution path rather than opaque binaries. However, trust is weakened by third-party publisher mismatch, mutable npx @latest execution, endpoint inconsistencies, and forwarding a unified API key plus strategy/query data through vendor gateway services. The footprint is plausible for the purpose but not fully trustworthy or tightly provenance-verified.

Confidence: 88%Severity: 63%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:46 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fopenfinclaw-quantitative-research%2F@f729ae7751996490dcae7d609165f073e93671e23220e6e8e1bdb4291109be24