dflow-kalshi-trading

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned and its endpoints appear consistent with DFlow trading, but it gives an AI agent the ability to perform real-money market trades and handle API credentials. The main concern is autonomous financial action and external tool trust, not clear malware or credential theft.

Confidence: 88%Severity: 82%
Audit Metadata
Analyzed At
Apr 23, 2026, 04:03 AM
Package URL
pkg:socket/skills-sh/DFlowProtocol%2Fdflow-skills%2Fdflow-kalshi-trading%2F@6d1ee9c79cc49b2e4344f59f20773ae87ca08d43