fittings-crossref-search

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The research purpose is coherent, but the implementation is not proportionate: a simple Crossref search is routed through a paid third-party gateway, may require a blockchain private key, and relies on downloading/executing a remote helper script. This is more risky than necessary for the stated task, though not confirmed malware.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-crossref-search%2F@47e17fbfa6e05a6bf25c6b2511748fba713f42a43d86159924de3d7c5e848a84