skills/fittings-sh/fittings/fittings-bls-series/Socket

fittings-bls-series

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The stated purpose is coherent, but the actual footprint is broader than needed for BLS data access. The main risks are an unpinned remote script download and forwarding a blockchain private key to that script, plus routing requests through a paid third-party gateway instead of the official BLS API.

Confidence: 87%Severity: 84%

Audit Metadata

Analyzed At

Aug 17, 2026, 10:32 PM

Package URL

pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-bls-series%2F@012c969e732ecc4759371bf6dc81f6120a38775d49df84eb96bdfae99b54191e