skills/hubblevision/hubble-data-service-skill/us-fundamental/Socket

us-fundamental

Warn

Audited by Socket on Jul 29, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s function is narrow and plausible, and installation is local-only, but it routes requests and an API key to an unverifiable bare IP over plain HTTP with no clear official publisher relationship. That makes the data flow and credential handling disproportionally risky for a simple market-data lookup skill.

Confidence: 89%Severity: 74%

Audit Metadata

Analyzed At

Jul 29, 2026, 09:33 AM

Package URL

pkg:socket/skills-sh/hubblevision%2Fhubble-data-service-skill%2Fus-fundamental%2F@8019e616e327f7f40e5fe8bbd197d0fcf079095c