alphaear-predictor

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/kronos_predictor.py

The fragment appears to be legitimate financial forecasting infrastructure rather than intentional malware. The main security concern is supply-chain and unsafe-deserialization risk: external model downloads are performed automatically, checkpoint provenance is not verified, and a legacy torch.load fallback may execute arbitrary pickle code from a tampered local checkpoint. The code fragment is incomplete, so assessment is limited to the supplied content.

Confidence: 96%Severity: 58%
Audit Metadata
Analyzed At
Sep 14, 2026, 05:39 PM
Package URL
pkg:socket/skills-sh/rkiding%2Fawesome-finance-skills%2Falphaear-predictor%2F@27b221bd412602963162b3b5cd822d8b6badd4dbadb0ef19158c0860fdf47b02