Stock Select

• Analyzed: May 11, 2026, 6:32 AM
• Findings: 1
• Version: 2.0.2
• Hash: 01f870e63c8a45d9b7ae060fd1c8b38ea78f3a99be9f88730a712722485249cb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates stock trading and account management by requiring users to provide sensitive credentials, including passwords and SMS verification codes, to an external API (api.stockbot.me). While these capabilities are consistent with the stated purpose of a trading assistant, the handling of financial authentication tokens and the execution of trades via an AI agent represent high-risk behaviors. No explicit evidence of malicious intent or data exfiltration beyond the documented service was found in SKILL.md, but the potential for credential harvesting or unauthorized financial transactions warrants a suspicious classification.