htx-futures-market

Warn

Audited by Socket on May 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated market-data purpose mostly aligns with the endpoint set, but the skill depends on an unverifiable external CLI, forwards HTX credentials into it, and includes an authenticated write action that it says can be called without user confirmation. Those factors make the footprint disproportionate to a low-risk market-data skill.

Confidence: 88%Severity: 84%
Audit Metadata
Analyzed At
May 2, 2026, 11:35 AM
Package URL
pkg:socket/skills-sh/htx-exchange%2Fhtx-skills-hub%2Fhtx-futures-market%2F@dd4479c05619f603a36a8bbd064d0575f5d748af