fittings-fema-flood-zone
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose is coherent, but it requires downloading and executing a remote helper script and then handing that script a plaintext wallet private key for payment signing. That combination is disproportionate for a simple flood-zone lookup and creates high supply-chain and credential-forwarding risk, even though the API domain itself appears consistent with the stated service.
Confidence: 87%Severity: 83%
Audit Metadata