fittings-fema-disaster-declarations

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Suspicious. The skill’s FEMA-lookup purpose is coherent, but its actual footprint includes remote code download, forwarding a plaintext wallet private key to that code, routing through a third-party payment gateway, and enabling autonomous spending. This looks more like high-risk payment tooling than a simple public-data lookup skill.

Confidence: 84%Severity: 79%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-fema-disaster-declarations%2F@f463a725ebad6b5d807a20fcba150ac121c09f40c1d654e4ce655cc16aa4cda8