claude-tradingview-mcp-autotrading

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose matches its need for exchange credentials and market data, but it enables unattended autonomous crypto trading with real financial consequences, asks the agent to trust and execute a repo-provided one-shot prompt, and relies on third-party repo code outside the named publisher identity. This is more a high-risk trading automation skill than clear malware, but its operational and supply-chain trust requirements are substantial.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmcp-skills%2Fclaude-tradingview-mcp-autotrading%2F@03997c6638060e9aa29f7cc2c170b2add2a3302bfb5ced3ff0153cda3eec4eb6