fittings-civic

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the purpose is coherent, but the skill’s actual footprint relies on a third-party gateway and a raw private key for paid requests. That combination is disproportionate for simple access to public government data and creates meaningful credential and payment-flow risk, even without clear evidence of malware.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-civic%2F@cb2ac5f53f323c3f1e765b583e99983df3e79bb6d004c1a567d622204bb855b3