fittings-ndbc-buoy-conditions

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose is coherent, but it couples a weather lookup with download-and-execute instructions and use of a plaintext crypto private key for payment signing. The main concern is trust in unseen remote client code plus autonomous financial authorization, not obvious credential theft or unrelated exfiltration.

Confidence: 83%Severity: 78%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-ndbc-buoy-conditions%2F@a9af76f3af2d54e5d45005ebf667d6333aef5dcd97e2099418db722d2cc7371e