fittings-fx-ecb-rate
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s FX-rate purpose is coherent, but its paid path relies on downloading and executing an unpinned remote script that is then given a wallet private key. Same-domain provenance helps, yet the combination of remote code execution, credential forwarding, and autonomous payment makes the overall risk high relative to the narrow purpose.
Confidence: 85%Severity: 84%
Audit Metadata