fittings-fx-ecb-timeseries

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose and network endpoints are broadly coherent, but it relies on executing a remotely fetched script and passing that script a raw wallet private key, creating a disproportionate trust burden. This looks more like a high-risk payment helper than clear malware.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-fx-ecb-timeseries%2F@38b2e7a2f3a07f7f12f6e1f2de26b7926dc58b8d24266a2f6973992d7b0a45fa