claude-tradingview-mcp-autotrading

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose matches its need for exchange credentials and market data, but it enables unattended autonomous crypto trading with real financial consequences, asks the agent to trust and execute a repo-provided one-shot prompt, and relies on third-party repo code outside the named publisher identity. This is more a high-risk trading automation skill than clear malware, but its operational and supply-chain trust requirements are substantial.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmcp-skills%2Fclaude-tradingview-mcp-autotrading%2F@03997c6638060e9aa29f7cc2c170b2add2a3302bfb5ced3ff0153cda3eec4eb6
Security Audit — socket — claude-tradingview-mcp-autotrading