fittings-rxnorm-normalize

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The medical normalization purpose is coherent, but the skill’s paid path depends on downloading and running an unpinned remote script that accepts a blockchain private key. That combination is disproportionate to a simple API wrapper and creates high supply-chain and credential-forwarding risk, even though the host appears same-brand and the free read-only catalog path is benign.

Confidence: 89%Severity: 82%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-rxnorm-normalize%2F@2f2509a83211130eaff8dfe2ac72cd695a8defa0171aeb647480c6205a9f4338