fittings-pdb-structure

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Suspicious. The lookup purpose is legitimate, but the real-use path depends on downloading and executing an unverifiable script that accepts a plaintext wallet private key and authorizes payments through an intermediary gateway. That footprint is disproportionate to a simple public-data metadata skill and creates high supply-chain and credential-forwarding risk even without clear evidence of overtly malicious intent.

Confidence: 86%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-pdb-structure%2F@a62a67ee19f30a92b59149840295c6b503dcab36d409de65103059487ef40491