fittings-csl-name-screen

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core sanctions-screening purpose is coherent, but the skill adds a paid intermediary, remote script download, and wallet private-key handling that increase trust and credential-forwarding risk beyond a simple screening lookup. The main concern is the unpinned downloaded helper receiving a sensitive private key for payment signing.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-csl-name-screen%2F@e1052daf94eb6284e514bccd52880acb8b1f8846d35b25f6eea9065069c575d9