hodlmm-range-keeper
Warn
Audited by Socket on Apr 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
BENIGN but high-impact. The skill's capabilities, required permissions, and Bitflow API data flow are coherent with its stated purpose as an automated HODLMM liquidity manager. The main risk is not hidden exfiltration but autonomous on-chain fund movement on mainnet via wallet/MCP execution, plus some uncertainty around MCP tool provenance.
Confidence: 87%Severity: 73%
Audit Metadata