fittings-doc-url-to-markdown

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core capability is aligned with the stated purpose, and the endpoints/payment model are broadly consistent with fittings.sh and x402. Risk comes from the optional download of an unpinned remote helper script and forwarding a wallet private key into that client for paid requests; this is proportionate but still sensitive for a document-conversion skill.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-doc-url-to-markdown%2F@7c027e035faf159eb076262b565ed12b56acfa7a1ec247d98996c5666c9f00d6