trade-analyze

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is largely aligned with its stated stock-analysis purpose and shows no obvious malware, credential harvesting, or third-party installer risk. However, it automates high-impact investment recommendations and processes untrusted web content through delegated subagents with inherited capabilities, making it medium security risk despite otherwise coherent behavior.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Aug 19, 2026, 07:41 AM
Package URL
pkg:socket/skills-sh/zubair-trabzada%2Fai-trading-hermes%2Ftrade-analyze%2F@1c1564469ab28f4b6ee550822eac988aa98baae1e0a6a437183ea58fdf7c4e31
Security Audit — socket — trade-analyze