claude-tradingview-mcp-autotrading
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s stated purpose matches its need for exchange credentials and market data, but it enables unattended autonomous crypto trading with real financial consequences, asks the agent to trust and execute a repo-provided one-shot prompt, and relies on third-party repo code outside the named publisher identity. This is more a high-risk trading automation skill than clear malware, but its operational and supply-chain trust requirements are substantial.
Confidence: 84%Severity: 78%
Audit Metadata