market-intel

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the market-analysis behavior is broadly aligned with the stated purpose, but the hidden MCP endpoint to a third-party domain and deliberate concealment of provider identity create a data-flow mismatch for an 'official Bitget' skill. Risk is driven more by opaque routing and trust-chain ambiguity than by explicit malware behavior.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 09:08 AM
Package URL
pkg:socket/skills-sh/bitget-ai%2Fagent_hub%2Fmarket-intel%2F@2ba3afb9cd1ab2c97145fdd06fd6b642be2f3aa661d2591c2e007d436fdbeff8
Security Audit — socket — market-intel