dune-mcp-skill

Fail

Audited by Socket on Mar 8, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Dune MCP Skill presents a coherent purpose: discover, query, and visualize Dune MCP data through a guarded, help-first workflow using a standard CLI adapter (uxc) and explicit authentication bindings. The footprint—credential bindings, header-based API key usage, and read/write operations guarded by user confirmation—appears proportionate to the intended blockchain data querying task. The primary security concerns are typical for any API-integrated tool that handles API keys and transmits data over HTTP(S): risk of credential leakage via logs, accidental exposure, and potential supply-chain risk from external CLI tooling or unresolved version pinning. Overall, the skill is broadly benign and purpose-aligned, but requires careful handling of credentials in logs and outputs to maintain data integrity and confidentiality.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 8, 2026, 09:43 AM
Package URL
pkg:socket/skills-sh/holon-run%2Fuxc%2Fdune-mcp-skill%2F@dc06b07f570aa9f4d88b2d3cab43fa4263737941