fittings-doc-url-to-markdown
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core capability is aligned with the stated purpose, and the endpoints/payment model are broadly consistent with fittings.sh and x402. Risk comes from the optional download of an unpinned remote helper script and forwarding a wallet private key into that client for paid requests; this is proportionate but still sensitive for a document-conversion skill.
Confidence: 82%Severity: 56%
Audit Metadata