batch-market-cap

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
references/mcp-setup.md

No direct malware is present in the supplied documentation. The main risks are executing an unpinned remote shell script, automatically executing the latest npm package through npx, and storing or passing the Octagon API key in potentially exposed locations. Pin and verify package versions, review package provenance, avoid piping remote scripts directly to a shell, and use secure secret storage. Assessment is limited because the referenced installer and npm package source were not provided.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 16, 2026, 09:13 PM
Package URL
pkg:socket/skills-sh/octagonai%2Fskills%2Fbatch-market-cap%2F@21e72c7dd0aebe78bb03780d5a9cfc7c2f99a5f22a8c770f39f5412ccea239eb
Security Audit — socket — batch-market-cap