fittings-fema-flood-zone

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose is coherent, but it requires downloading and executing a remote helper script and then handing that script a plaintext wallet private key for payment signing. That combination is disproportionate for a simple flood-zone lookup and creates high supply-chain and credential-forwarding risk, even though the API domain itself appears consistent with the stated service.

Confidence: 87%Severity: 83%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-fema-flood-zone%2F@fe427436ba34e47c43b27ea1143231f9bacfbbf39f9b3d5cc6f613eefed84a30