fittings-rxclass-drug-classes

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Suspicious. The medical lookup purpose is coherent, but the skill’s actual footprint adds a third-party payment gateway, a direct remote script download, and forwarding of a plaintext wallet private key to that helper. The combination is disproportionate for a drug-class lookup and creates high supply-chain and credential-handling risk even without clear evidence of outright malware.

Confidence: 86%Severity: 86%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-rxclass-drug-classes%2F@007ea578dfbd920ba63c8aab3ed7ddb681a5e88d78b88c4d6c67b1024e6d7566