fittings-govinfo-public-law

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core lookup purpose is coherent, but the skill’s trust model is not fully proportionate. The main risks are executing an unpinned remote helper script and supplying it a raw wallet private key, while all paid access is mediated through a third-party gateway rather than the official government API.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:35 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-govinfo-public-law%2F@1374b7e54f21efc3bc22964f87e5ce92b5f367bc5c5199a6a60ba3c2c5fb8604