fittings-lunar-moon-times

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the trust model is not proportionate. The skill asks the agent to download and execute an unpinned remote script and then hand it a wallet private key for automated payment authorization, creating high supply-chain and credential-forwarding risk despite same-domain hosting.

Confidence: 88%Severity: 86%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-lunar-moon-times%2F@4731536717c2ba9c0e1b06ff3a80433d98ac475f17f2ef17b5ff3b20cd69c9c5