ai4trade-trading-signals

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose matches trading-signal workflows, but it delegates operational instructions to mutable remote content and enables financial actions without explicit per-action approval in the provided text. Data appears to flow to first-party AI4Trade endpoints rather than an unrelated proxy, so this is not confirmed malware, but it is a high-risk agent skill.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Oct 16, 2026, 12:41 PM
Package URL
pkg:socket/skills-sh/traderton%2Fskills%2Fai4trade-trading-signals%2F@66278cfb34f2a6097a6941cd12a5e21f2a572debe420757dc0f777e86ef608cf