fittings-aba-routing-validate

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated function is coherent, and the service appears to exist, but the install and execution model is high risk: it requires downloading an unverifiable script from fittings.sh and optionally passing it a plaintext private key for off-chain payment signing. That combination is disproportionate for simple routing-number validation and triggers a high credential-forwarding/supply-chain concern.

Confidence: 85%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-aba-routing-validate%2F@8c9832101943edceaf47a1230190957e987a89b0efb28db25a8ec1e51fb1360c