htx-futures-market
Warn
Audited by Socket on May 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated market-data purpose mostly aligns with the endpoint set, but the skill depends on an unverifiable external CLI, forwards HTX credentials into it, and includes an authenticated write action that it says can be called without user confirmation. Those factors make the footprint disproportionate to a low-risk market-data skill.
Confidence: 88%Severity: 84%
Audit Metadata