fittings-fdic-bank-lookup

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is a simple FDIC bank lookup, but the skill routes calls through a third-party gateway and asks the agent to download and run an unverified script that can receive a wallet private key. The data source claim is plausible and the service domain is consistent, but the install trust and credential-forwarding footprint are not proportionate to a bank lookup skill.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-fdic-bank-lookup%2F@c1d50defd3585684d88968f1d00553a15683a3957d36c9d085b06f7d5e364a08