prediction-markets-analysis
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalyreferences/mcp-setup.md
LOWAnomalyLOW
references/mcp-setup.md
No direct malware is present in this documentation fragment. It presents moderate supply-chain and credential-exposure risks because it executes unpinned packages, uses a curl-to-shell installer, and offers command-line or URL-based API-key handling. Use a pinned and verified package version, review lockfiles or package contents, prefer environment files or managed secrets, and use OAuth rather than embedding keys in remote URLs.
Confidence: 98%Severity: 58%
Audit Metadata