bitquery-graphql-skill
Audited by Socket on Mar 8, 2026
1 alert found:
Obfuscated FileThe skill demonstrates coherent purpose-capability alignment for querying Bitquery GraphQL data across multiple networks via uxC with OAuth-based authentication. Data flows and endpoints are consistent with legitimate API usage, and the credential handling (OAuth client credentials and token binding) is appropriate for the described task. There are no obvious harmful data exfiltration paths or third-party credential forwarding beyond standard provider authentication. The primary concerns are around dependency trust (external CLI tools and their install sources) and ensuring secure management of OAuth tokens and bindings within uxC. Overall, the risk is low to moderate (benign with careful operational controls).