dune-mcp-skill
Audited by Socket on Mar 8, 2026
1 alert found:
Obfuscated FileThe Dune MCP Skill presents a coherent purpose: discover, query, and visualize Dune MCP data through a guarded, help-first workflow using a standard CLI adapter (uxc) and explicit authentication bindings. The footprint—credential bindings, header-based API key usage, and read/write operations guarded by user confirmation—appears proportionate to the intended blockchain data querying task. The primary security concerns are typical for any API-integrated tool that handles API keys and transmits data over HTTP(S): risk of credential leakage via logs, accidental exposure, and potential supply-chain risk from external CLI tooling or unresolved version pinning. Overall, the skill is broadly benign and purpose-aligned, but requires careful handling of credentials in logs and outputs to maintain data integrity and confidentiality.