fittings-naics-lookup

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is coherent, and the network endpoint matches the advertised service, but the skill couples a simple NAICS lookup with remote helper download/execution and use of a blockchain private key for payment. That combination is disproportionate for a lookup skill and creates meaningful supply-chain and credential-forwarding risk, even though the infrastructure appears same-publisher rather than obviously malicious.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-naics-lookup%2F@ec5973d7f3594aeb22d872f468aef81a1709ebd870dc8be642d731766aefb77b