fittings-civic
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the purpose is coherent, but the skill’s actual footprint relies on a third-party gateway and a raw private key for paid requests. That combination is disproportionate for simple access to public government data and creates meaningful credential and payment-flow risk, even without clear evidence of malware.
Confidence: 84%Severity: 72%
Audit Metadata