skills/escapewu/skills/crypto-market-data/Socket

crypto-market-data

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's capabilities fit its stated crypto market-data purpose, and its only package install is benign. However, the core API endpoint and related screenshot storage host are not publicly verifiable, so the skill asks users to send an API key and market queries to an opaque third-party service with unclear publisher provenance.

Confidence: 84%Severity: 63%

Audit Metadata

Analyzed At

Mar 18, 2026, 09:05 PM

Package URL

pkg:socket/skills-sh/escapewu%2Fskills%2Fcrypto-market-data%2F@6435f4f0693af1182644bdc96ade10aeac6450df