fittings-lang-detect

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Suspicious. The core API purpose is coherent, but the skill couples basic language detection with remote code download and wallet-based payment signing. The largest risks are executing an unverifiable helper script and giving it a raw private key to authorize spending.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-lang-detect%2F@7f86d4d6a692c6dda0b17154c6c5a53c6148e7aaced8da2aae8ae6d300e4b22e