fittings-energy-uk-carbon-intensity
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is coherent, but the skill’s operational model depends on a remotely downloaded, unverifiable client script and forwards a wallet private key into that client for paid calls. Data flow through fittings.sh is plausible for a metered gateway, yet the combination of remote download, credential handling, and autonomous spending makes the skill higher risk than its simple API purpose suggests.
Confidence: 84%Severity: 82%
Audit Metadata