fittings-fema-disaster-declarations
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Suspicious. The skill’s FEMA-lookup purpose is coherent, but its actual footprint includes remote code download, forwarding a plaintext wallet private key to that code, routing through a third-party payment gateway, and enabling autonomous spending. This looks more like high-risk payment tooling than a simple public-data lookup skill.
Confidence: 84%Severity: 79%
Audit Metadata