fittings-doc-html-to-markdown

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the API purpose is coherent, but the skill's trust model is weak. It instructs the agent to download and execute a mutable remote script and provide a raw blockchain private key to that script for paid requests, creating disproportionate supply-chain and credential-forwarding risk despite same-domain consistency.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-doc-html-to-markdown%2F@744ee3e8a946e28a5ee7faa510f112a02c680ff710f352281175437413bc8946