fittings-chem-pubchem-compound
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core chemistry lookup purpose is coherent, but the skill’s actual footprint includes remote script download plus forwarding a plaintext wallet private key into local client code for paid requests through a third-party gateway. That is proportionately riskier than the stated lookup task, though not clearly malicious.
Confidence: 85%Severity: 66%
Audit Metadata