skills/zapier/connectors/alpaca/Socket

alpaca

Warn

Audited by Socket on Aug 7, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

BENIGN but high-impact skill: its capabilities match its stated brokerage purpose, install path appears same-org and standard, and credentials flow to Alpaca or Zapier as disclosed. The main risk is inherent financial autonomy—this skill can place real trades if live mode is enabled—plus moderate transitive trust from skill installation.

Confidence: 89%Severity: 72%

Audit Metadata

Analyzed At

Aug 7, 2026, 08:57 PM

Package URL

pkg:socket/skills-sh/zapier%2Fconnectors%2Falpaca%2F@161e3a17d1c8abb4c981b4a9d3384d407d9e3fe09aab5d502e20634edeedbc61