tradingview-reader — security audits

Review recommended

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  warn

  This skill enables reading market data and charts directly from a local TradingView desktop application. It requires the installation of a third-party CLI and a plugin from the author's GitHub. The skill uses the Chrome DevTools Protocol to extract session cookies from the application for authentication and includes functionality for capturing screenshots.

  Risk: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTIONMay 10, 2026Full report

• Socket

  warn

  1 alert: gptAnomaly

  May 10, 2026Full report

• Snyk

  warn

  Risk: MEDIUM · 1 issue

  Risk: MEDIUMMay 10, 2026Full report