tigeropen-go

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is mostly coherent with a legitimate Tiger Brokers Go SDK integration and appears to rely on same-org official docs/package distribution, not an obvious third-party exfiltration path. However, the documented GitHub/module path does not match the official same-org Go SDK repo found in the evidence, creating install-trust ambiguity, and the skill supports high-impact financial actions with real funds. Treat as medium risk until the repo/module references are corrected and verified.

Confidence: 86%Severity: 52%
Audit Metadata
Analyzed At
Apr 25, 2026, 01:15 AM
Package URL
pkg:socket/skills-sh/tigerfintech%2Ftigeropen-skill%2Ftigeropen-go%2F@78be394a8668f118c264904a9b5426b262c1c3a3