fittings-icd10-lookup

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The ICD-10 lookup purpose is plausible, but the skill couples it to direct download-and-execute of an unverified helper script and forwards a blockchain private key to that script for payment signing. The service endpoints and stated medical data source look coherent, yet the install trust and credential-handling footprint are disproportionate to a simple code lookup skill.

Confidence: 85%Severity: 83%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-icd10-lookup%2F@18947325bd4620077b7d932445fa852838a5c4f98165def91ecdd646bc36f9bf