trade

Warn

Audited by Socket on Aug 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent for a trading research skill, but it relies on unverified local sub-skills and a locally executed helper script with no provenance details. Main risk is supply-chain and prompt-injection exposure from delegated web-driven analysis, not confirmed malware or credential theft.

Confidence: 81%Severity: 58%
Audit Metadata
Analyzed At
Aug 8, 2026, 02:44 PM
Package URL
pkg:socket/skills-sh/zubair-trabzada%2Fai-trading-hermes%2Ftrade%2F@d8a358a5ffd64c983972746e8c80d34b49717669263997e4d59f45f9c68e430b
Security Audit — socket — trade