fittings-fx-convert

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Overall coherent with its stated purpose and same-domain service, but it carries meaningful risk from downloading and running an unpinned helper script and from granting that script access to a blockchain private key for automated micro-payments. This looks more like a legitimate but security-sensitive paid API skill than malware.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-fx-convert%2F@a8b2ba17ae5806837afbc1b691e47c74dd4aab80704a5b68b5c62fc0ec292cd5