fittings-quake-recent
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill’s earthquake-query purpose is legitimate and mostly aligned, but the trust model is disproportionate: it asks the agent to download an unpinned executable script and optionally hand it a plaintext wallet private key for automated payment. That makes this a high-risk, suspicious skill rather than confirmed malware.
Confidence: 87%Severity: 84%
Audit Metadata