fittings-quake-recent

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s earthquake-query purpose is legitimate and mostly aligned, but the trust model is disproportionate: it asks the agent to download an unpinned executable script and optionally hand it a plaintext wallet private key for automated payment. That makes this a high-risk, suspicious skill rather than confirmed malware.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-quake-recent%2F@d2561d85070fca9524a83101bbc68d585c1d97251ebd54cc2767ef2705dab635