indigo-assets

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

Overall, the skill's footprint is coherent with its stated purpose of querying real-time prices for Indigo iAssets and specific tokens. There are no evident credential or execution risks in the provided fragment, and the data flow appears to be direct from official MCP tools/APIs to the user. The risk level is low, with no suspicious install/download behavior or credential exposure. Monitor for any hidden endpoints if MCP Tools expand to external services in future iterations.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 02:20 AM
Package URL
pkg:socket/skills-sh/IndigoProtocol%2Findigo-ai%2Findigo-assets%2F@8337ede2ffd8668d1afcb28096a78457c8df0783