fittings-chem-pubchem-compound

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core chemistry lookup purpose is coherent, but the skill’s actual footprint includes remote script download plus forwarding a plaintext wallet private key into local client code for paid requests through a third-party gateway. That is proportionately riskier than the stated lookup task, though not clearly malicious.

Confidence: 85%Severity: 66%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-chem-pubchem-compound%2F@3f176054d39cb29e0487eea36fcea89781f77f095b6a937827d494ddcd7896f8