fittings-rxnorm-normalize
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The medical normalization purpose is coherent, but the skill’s paid path depends on downloading and running an unpinned remote script that accepts a blockchain private key. That combination is disproportionate to a simple API wrapper and creates high supply-chain and credential-forwarding risk, even though the host appears same-brand and the free read-only catalog path is benign.
Confidence: 89%Severity: 82%
Audit Metadata