fittings-brand-logo

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core logo-lookup purpose is coherent, but the skill pairs it with direct download-and-execute instructions and an autonomous payment flow that uses a plaintext blockchain private key. That makes the footprint disproportionately risky for a simple favicon service, even though the endpoints appear consistent with the stated provider.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-brand-logo%2F@f30646bb13ddb655a6d58494467205681ed45596eac1bd75c827119e68351686