fittings-rxterms-prescribable

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core lookup purpose is coherent, and the main endpoint/domain usage is internally consistent, but the skill mixes remote script download with local execution and requires a plaintext wallet private key to enable autonomous paid calls. This is not clearly malicious, yet it carries meaningful supply-chain and financial-signing risk beyond a simple drug lookup helper.

Confidence: 83%Severity: 58%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-rxterms-prescribable%2F@5859f2d804b744dc272cb84198254312c8a2962e5897c2130827822e7e704d0d