fittings-census-address-geographies

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The stated purpose is coherent, but the trust model is not proportionate: the skill asks the agent to download and run an unverified remote script and then hand it a plaintext wallet private key for paid calls. That combination makes this a suspicious high-risk skill rather than confirmed malware.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-census-address-geographies%2F@d78c09d9292b11a855da96e170d95a1d2be0874e18504b72826c936f0dd84a2c