fittings-gov-congress-bill

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent, and the domain/publisher relationship appears consistent, but the skill uses a same-publisher download-and-execute client and requires a blockchain private key for paid access to otherwise public legislative data. This looks more like a risky payment-gated API wrapper than overt malware; trust and credential scope are the main concerns.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-gov-congress-bill%2F@3fda0d12a83690a2a9936c271d980a700c9ed6b7288c3b3c6aa99b6491ea6e46