hive-mcp-skill
Warn
Audited by Socket on Oct 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s stated purpose fits crypto data discovery, and the UXC dependency appears to be an official tool, but the skill points agents at a Hive endpoint that does not match the documented official MCP host. That inconsistency undermines install/data-flow trust and makes the remote service routing questionable even without clear malware behavior.
Confidence: 90%Severity: 72%
Audit Metadata