cn-fundamental

Warn

Audited by Socket on May 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent for a market-data skill, but the actual data flow is forced through an unverifiable private API on a raw IP over HTTP with direct API-key forwarding. The install step is benign, yet the endpoint trust and lack of transport security make the skill high-risk for interception and misuse.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
May 8, 2026, 02:52 PM
Package URL
pkg:socket/skills-sh/HubbleVision%2Fhubble-data-service-skill%2Fcn-fundamental%2F@341b958f578785186dafc9619c37eda0c25375d5