blockrun-mcp-live-data

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The install path is relatively legitimate and same-org, so this is not confirmed malware. However, the skill's actual footprint extends well beyond 'live data' into paid model routing, remote sandbox execution, phone-number purchase, and outbound calling via an intermediary service funded by a crypto wallet, which is disproportionate and creates meaningful security and autonomy risk.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmcp-skills%2Fblockrun-mcp-live-data%2F@8114a0e45a5f5f0638f971421c8c11744bc255f31c0d00f57b20191c634a0c9c
Security Audit — socket — blockrun-mcp-live-data