fittings-dailymed-spl-search

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill’s actual footprint is disproportionate because it relies on an unverifiable downloaded client script and forwards a wallet private key to that script for payment signing. The medical-search function itself is benign, yet the install and credential flow make this a high security-risk skill.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-dailymed-spl-search%2F@8dc7793b4b5f37d6451456e2b4afa7a10d3adf437dd80ff82d1732212339b053