fittings-nasa-power-point
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is plausible, but the skill’s actual footprint is broader than a simple NASA data client. It requires a wallet private key, routes calls and payment authorizations through fittings.sh instead of the official NASA API, and instructs execution of an unverifiable remote client script. The main concern is credential forwarding to third-party code plus autonomous paid actions, not the weather-data function itself.
Confidence: 90%Severity: 86%
Audit Metadata