hk-kline

Warn

Audited by Socket on May 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能用途与能力基本匹配,但其实际数据流存在明显信任问题:所有请求被强制发送到一个无法公开验证归属的私有 HTTP IP 端点,并附带硬编码 API key。未见明确恶意载荷或无关权限滥用,因此更接近可疑/高风险集成而非确认恶意。

Confidence: 90%Severity: 79%
Audit Metadata
Analyzed At
May 8, 2026, 02:52 PM
Package URL
pkg:socket/skills-sh/HubbleVision%2Fhubble-data-service-skill%2Fhk-kline%2F@2f264fe9a419a653642efff3692332c4be65c6b8