ctrader-mcp-servers

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
references/trader-workflows.md

The fragment describes an auditable trading-operation workflow with substantial safeguards and no evidence of malicious supply-chain behavior, obfuscation, credential theft, or system compromise. Its main risk is legitimate but high-impact financial mutation: order creation, amendments, and closures. The Remote two-step market fallback can temporarily leave a position without SL/TP, and the documented force mode can bypass risk refusal; both require strict authorization and runtime enforcement. The referenced scripts and API implementations require separate review.

Confidence: 96%Severity: 62%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:58 PM
Package URL
pkg:socket/skills-sh/spotware%2Fctrader-skills%2Fctrader-mcp-servers%2F@d19c5d0d785e452b99ae98049ad7e9208a22f7a3e79c7426097156d69aec4d31