skills/aiagenta2z/onekey-gateway/mcp-server-chart/Socket

mcp-server-chart

Warn

Audited by Socket on Mar 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is plausible, but its real footprint is a third-party gateway wrapper that forwards both user data and credentials to DeepNLP/OneKey infrastructure. Registry-based installs reduce supply-chain concern, but the intermediary data flow, credential forwarding, and demo-key fallback make the scope disproportionate for a chart skill.

Confidence: 82%Severity: 69%

Audit Metadata

Analyzed At

Mar 30, 2026, 02:44 PM

Package URL

pkg:socket/skills-sh/aiagenta2z%2Fonekey-gateway%2Fmcp-server-chart%2F@ce80da1f3545522168d3bec25bd39a624a449f41