market-overview
Warn
Audited by Socket on Jun 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose and capabilities mostly align, and there is no evidence of malware or unsafe installers. The main concern is data-flow integrity: both market data and the required API key are routed through a vendor-defined proxy host (`NEXSCOPE_PROXY_BASE`) rather than clearly documented official service endpoints, making the intermediary trust model only partially verifiable.
Confidence: 83%Severity: 58%
Audit Metadata