tigeropen-go
Warn
Audited by Socket on Apr 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is mostly coherent with a legitimate Tiger Brokers Go SDK integration and appears to rely on same-org official docs/package distribution, not an obvious third-party exfiltration path. However, the documented GitHub/module path does not match the official same-org Go SDK repo found in the evidence, creating install-trust ambiguity, and the skill supports high-impact financial actions with real funds. Treat as medium risk until the repo/module references are corrected and verified.
Confidence: 86%Severity: 52%
Audit Metadata