skills/ruvnet/ruflo/trader-regime/Socket

trader-regime

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose broadly matches its capabilities, but it relies on executing an unpinned third-party npm trading package with only partially verified provenance, then sends analysis through external MCP services. This is not clearly malicious, but the install trust and financial-decision context make it medium risk.

Confidence: 82%Severity: 62%

Audit Metadata

Analyzed At

Sep 15, 2026, 11:38 AM

Package URL

pkg:socket/skills-sh/ruvnet%2Fruflo%2Ftrader-regime%2F@791e830ccde287ceb4b77bd5c44e7a4d2805ac57d4539ac0a71154601e67556c