skills/fittings-sh/fittings/fittings-kev-recent/Socket

fittings-kev-recent

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The core purpose is plausible, but the skill depends on downloading and executing an unverifiable remote helper and then giving it a wallet private key for payment signing. The service itself appears real, yet the install trust and credential-forwarding pattern are disproportionate for a KEV lookup skill.

Confidence: 87%Severity: 84%

Audit Metadata

Analyzed At

Aug 17, 2026, 10:34 PM

Package URL

pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-kev-recent%2F@3101d710d94e0bd08e123e08d51c77e4d38c0f5bd723dd35fccdda59d90bd190