fittings-census-geography-bundle

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The geography-query purpose is coherent, but the skill relies on an unverifiable remote script download and then passes a wallet private key into that script for payment authorization. The third-party gateway model is plausible, yet the install path and credential forwarding are disproportionate enough to make this high risk.

Confidence: 85%Severity: 86%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-census-geography-bundle%2F@03f3f211f672c7a85f5d68d6cc39a9c5779dcc5ef6154a6c42a6b58a22825e24