fittings-nasa-power-point

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the skill’s actual footprint is broader than a simple NASA data client. It requires a wallet private key, routes calls and payment authorizations through fittings.sh instead of the official NASA API, and instructs execution of an unverifiable remote client script. The main concern is credential forwarding to third-party code plus autonomous paid actions, not the weather-data function itself.

Confidence: 90%Severity: 86%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-nasa-power-point%2F@b3be7681ab530e829b22eca4413ff35c7d0a316b85fedf9ad1761211d4d8c51d