hive-mcp-skill

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose fits crypto data discovery, and the UXC dependency appears to be an official tool, but the skill points agents at a Hive endpoint that does not match the documented official MCP host. That inconsistency undermines install/data-flow trust and makes the remote service routing questionable even without clear malware behavior.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Oct 16, 2026, 10:13 PM
Package URL
pkg:socket/skills-sh/holon-run%2Fuxc%2Fhive-mcp-skill%2F@5c1ca053741e81901cfa58832b8861e8b8e0b77a3c996b49b3a29dfa94d10e84