fittings-road-nearest

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The API purpose is coherent, but the skill’s paid path depends on downloading and executing an unpinned remote script, then forwarding a wallet private key to it. That combination makes the skill high risk even though the service domain and endpoint appear consistent with the stated functionality.

Confidence: 88%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-road-nearest%2F@bcd577d22e2134d04c53b03cd689131480020659f8363402089df2c8ead90956