opennews-mcp-news-aggregation

Warn

Audited by Socket on May 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s core function matches crypto news aggregation, but trust and provenance are incomplete. The main concerns are unclear installation source for opennews-mcp, cross-brand credential routing to 6551.io, and token-in-URL WebSocket auth; data flows otherwise align with the stated API client purpose.

Confidence: 82%Severity: 64%
Audit Metadata
Analyzed At
May 16, 2026, 09:50 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fmcp-skills%2Fopennews-mcp-news-aggregation%2F@94a5db715fa81b406f1a8b24b88472007e91927d
Security Audit — socket — opennews-mcp-news-aggregation