fittings-pubmed-search
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The PubMed search purpose is coherent, but the skill relies on downloading and executing an unverifiable same-origin script and then passing it a wallet private key for paid requests. The gateway/payment model is disclosed and plausible, yet the install trust and credential-forwarding footprint are disproportionate enough to make this high risk.
Confidence: 88%Severity: 84%
Audit Metadata