fittings-brand-logo
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core logo-lookup purpose is coherent, but the skill pairs it with direct download-and-execute instructions and an autonomous payment flow that uses a plaintext blockchain private key. That makes the footprint disproportionately risky for a simple favicon service, even though the endpoints appear consistent with the stated provider.
Confidence: 84%Severity: 68%
Audit Metadata