bitquery-graphql-skill

Fail

Audited by Socket on Mar 8, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill demonstrates coherent purpose-capability alignment for querying Bitquery GraphQL data across multiple networks via uxC with OAuth-based authentication. Data flows and endpoints are consistent with legitimate API usage, and the credential handling (OAuth client credentials and token binding) is appropriate for the described task. There are no obvious harmful data exfiltration paths or third-party credential forwarding beyond standard provider authentication. The primary concerns are around dependency trust (external CLI tools and their install sources) and ensuring secure management of OAuth tokens and bindings within uxC. Overall, the risk is low to moderate (benign with careful operational controls).

Confidence: 98%
Audit Metadata
Analyzed At
Mar 8, 2026, 09:43 AM
Package URL
pkg:socket/skills-sh/holon-run%2Fuxc%2Fbitquery-graphql-skill%2F@eafb2833558198d0af725c496e1b424e70273dee