fittings-crypto-random-bytes

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent with its stated purpose: a paid randomness API skill using fittings.sh and x402. The main risks are the unpinned remote script download and handing a wallet private key to local helper code; these make it medium risk but not strongly indicative of malicious intent.

Confidence: 85%Severity: 54%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-crypto-random-bytes%2F@2d54308f735ed40b4000d96e934542025f014ad010e6c6a98fa16bec8bdcbfab