query

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill presents a coherent purpose as a data-query/analysis tool for Ethereum network data using established data sources (ClickHouse, Prometheus, Loki, Dora) with controlled Python execution in sandboxed contexts. The data flow is largely confidential and analysis-centric, with a notable but manageable risk vector around optional public uploads of artifacts via storage.upload(), which could expose sensitive results if not properly gated. Overall, the footprint is benign and proportionate to its stated purpose, with a medium-low securityRisk due to potential data exfiltration via uploads.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 04:53 AM
Package URL
pkg:socket/skills-sh/ethpandaops%2Fmcp%2Fquery%2F@cae3d940aadd728172eae1f92043225ce0678961