fittings-lunar-moon-times
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is coherent, but the trust model is not proportionate. The skill asks the agent to download and execute an unpinned remote script and then hand it a wallet private key for automated payment authorization, creating high supply-chain and credential-forwarding risk despite same-domain hosting.
Confidence: 88%Severity: 86%
Audit Metadata