news-briefing

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s news-briefing behavior is broadly aligned with its purpose, but the declared 'official Bitget' identity is weakened by a third-party MCP endpoint reference and explicit suppression of infrastructure details. No clear credential theft or malicious payload is shown, yet backend data-flow transparency is insufficient.

Confidence: 78%Severity: 56%
Audit Metadata
Analyzed At
Mar 21, 2026, 06:52 AM
Package URL
pkg:socket/skills-sh/BitgetLimited%2Fagent_hub%2Fnews-briefing%2F@e92345fd4c965377b9196aa8a1909bec2101adea
Security Audit — socket — news-briefing