crypto-indicators

Warn

Audited by Socket on May 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. 该技能的表面用途与加密指标查询一致,但它把所有查询和API key强制路由到一个不可验证的私有HTTP裸IP服务,且禁止使用其他来源核验数据。核心风险是第三方网关拦截、明文传输和凭证转发,而非本地安装执行。

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
May 8, 2026, 02:52 PM
Package URL
pkg:socket/skills-sh/HubbleVision%2Fhubble-data-service-skill%2Fcrypto-indicators%2F@29fc34891e2dc2eaa049414c66772fed7c55658c