Security audit
TraderBro - Credit Rating for Investment Influencers
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward TraderBro CLI helper, with disclosed use of an API key and external Homebrew-installed binary.
Install only if you trust TraderBro and its Homebrew tap. Use a dedicated TraderBro API key where possible, avoid pasting real keys into chats or logs, revoke or rotate the key if exposed, and treat market predictions as research inputs rather than financial advice.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.