trading-alert-scheduler

Warn

Audited by Socket on Mar 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill handles highly sensitive brokerage data and routes it through a non-official personal IBKR MCP dependency plus other transitive skills. This looks more like a high-risk financial automation/integration than clear malware; the main concern is trust and credential/data exposure, not overt exfiltration.

Confidence: 83%Severity: 68%
Audit Metadata
Analyzed At
Mar 26, 2026, 03:18 AM
Package URL
pkg:socket/skills-sh/scientiacapital%2Fskills%2Ftrading-alert-scheduler%2F@38614e473caafddad81b08833b0f0722d28c6791