skills/tikhub/tikhub-plugin/tikhub-mcp/Socket

tikhub-mcp

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's purpose and TikHub endpoint usage are internally consistent, but the hosted path relies on a non-TikHub third-party CLI (`mcp-remote`) and forwards the TikHub API key through it. That makes this a coherent but medium-risk skill due to supply-chain and credential-forwarding concerns, not clear malware.

Confidence: 89%Severity: 64%

Audit Metadata

Analyzed At

Jul 8, 2026, 09:43 AM

Package URL

pkg:socket/skills-sh/TikHub%2Ftikhub-plugin%2Ftikhub-mcp%2F@9c0c96e5b2f4fe05a53e9efd1e3cb8598e51b575734b96d17a67e6636181a7f5