blockrun-mcp-live-data
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The install path is relatively legitimate and same-org, so this is not confirmed malware. However, the skill's actual footprint extends well beyond 'live data' into paid model routing, remote sandbox execution, phone-number purchase, and outbound calling via an intermediary service funded by a crypto wallet, which is disproportionate and creates meaningful security and autonomy risk.
Confidence: 88%Severity: 72%
Audit Metadata