skills/hubblevision/hubble-data-service-skill/hk-realtime-quote/Socket

hk-realtime-quote

Warn

Audited by Socket on May 8, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent for stock quotes, but its data flow is not trustworthy. It hard-routes all market requests through an unverifiable private API on a bare IP over unencrypted HTTP and exposes a hard-coded API key, creating clear credential and integrity risks.

Confidence: 91%Severity: 82%

Audit Metadata

Analyzed At

May 8, 2026, 02:52 PM

Package URL

pkg:socket/skills-sh/HubbleVision%2Fhubble-data-service-skill%2Fhk-realtime-quote%2F@8a8c82a6535219420ece7692cc6b162726fa429d