cn-fundamental
Warn
Audited by Socket on May 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is coherent for a market-data skill, but the actual data flow is forced through an unverifiable private API on a raw IP over HTTP with direct API-key forwarding. The install step is benign, yet the endpoint trust and lack of transport security make the skill high-risk for interception and misuse.
Confidence: 87%Severity: 78%
Audit Metadata