fittings-orcid-researcher-profile
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core lookup purpose is plausible, but the skill routes a public-data query through a paid third-party gateway, asks for a blockchain private key, and optionally downloads executable helper code from that same service. This is not confirmed malware, but the install trust, credential exposure, and autonomous payment behavior are disproportionate to a simple ORCID profile lookup.
Confidence: 82%Severity: 74%
Audit Metadata