fittings-hts-lookup

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the lookup purpose is coherent, but the skill’s actual footprint includes a raw remote script download and forwarding a wallet private key to that script for paid execution. The upstream data provenance is legitimate, yet the install trust and credential-handling model are disproportionate for a reference lookup skill.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-hts-lookup%2F@fcff65f51cff51fe086c6689f028df1aae14e78ebdef8f4042c48a5a882a0103