skills/aibtcdev/skills/hodlmm-range-keeper/Socket

hodlmm-range-keeper

Warn

Audited by Socket on Apr 8, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

BENIGN but high-impact. The skill's capabilities, required permissions, and Bitflow API data flow are coherent with its stated purpose as an automated HODLMM liquidity manager. The main risk is not hidden exfiltration but autonomous on-chain fund movement on mainnet via wallet/MCP execution, plus some uncertainty around MCP tool provenance.

Confidence: 87%Severity: 73%

Audit Metadata

Analyzed At

Apr 8, 2026, 02:47 AM

Package URL

pkg:socket/skills-sh/aibtcdev%2Fskills%2Fhodlmm-range-keeper%2F@67c3a1c2bef0fa6d33f5b8f2933f35086bf49db5