dhanhq

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
examples/order_management.py

The fragment is a trading demonstration with explicit live-execution behavior, not apparent malware. It can place, modify, and cancel real brokerage orders when RUN_LIVE_EXAMPLE=1 and valid credentials are available. Review the unprovided get_client() and preview_order() implementations and use a test account or additional confirmation safeguards before execution. The main risk is unintended financial activity, not data theft or system compromise.

Confidence: 97%Severity: 62%
Audit Metadata
Analyzed At
Sep 15, 2026, 12:07 AM
Package URL
pkg:socket/skills-sh/dhan-oss%2Fdhanhq-skills%2Fdhanhq%2F@d74fceb62d6d1d626fa22ff1b37931121549f6383f14aedfb5e445977b5b0384
Security Audit — socket — dhanhq