batch-market-cap
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalyreferences/mcp-setup.md
LOWAnomalyLOW
references/mcp-setup.md
No direct malware is present in the supplied documentation. The main risks are executing an unpinned remote shell script, automatically executing the latest npm package through npx, and storing or passing the Octagon API key in potentially exposed locations. Pin and verify package versions, review package provenance, avoid piping remote scripts directly to a shell, and use secure secret storage. Assessment is limited because the referenced installer and npm package source were not provided.
Confidence: 98%Severity: 58%
Audit Metadata