fittings-naics-lookup
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is coherent, and the network endpoint matches the advertised service, but the skill couples a simple NAICS lookup with remote helper download/execution and use of a blockchain private key for payment. That combination is disproportionate for a lookup skill and creates meaningful supply-chain and credential-forwarding risk, even though the infrastructure appears same-publisher rather than obviously malicious.
Confidence: 84%Severity: 74%
Audit Metadata