trading-alert-scheduler

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill handles highly sensitive brokerage data and routes it through a non-official personal IBKR MCP dependency plus other transitive skills. This looks more like a high-risk financial automation/integration than clear malware; the main concern is trust and credential/data exposure, not overt exfiltration.

Confidence: 83%Severity: 68%
Audit Metadata
Analyzed At
Mar 15, 2026, 07:13 PM
Package URL
pkg:socket/skills-sh/scientiacapital%2Fskills%2Ftrading-alert-scheduler%2F@167967ba3bc50469f93cef177c8e45dd70fc01f5