fittings-pubmed-search

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The PubMed search purpose is coherent, but the skill relies on downloading and executing an unverifiable same-origin script and then passing it a wallet private key for paid requests. The gateway/payment model is disclosed and plausible, yet the install trust and credential-forwarding footprint are disproportionate enough to make this high risk.

Confidence: 88%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-pubmed-search%2F@8dbb8178d31f11bae95d6602d0474f9e15fa908f7243c56d0974e4266eb90330