fittings-sec-company-filings
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core SEC-filings purpose is coherent, but the skill mixes a paid third-party gateway, remote helper download, and raw wallet-key signing. It is not clearly malicious, yet its install and payment model create meaningful supply-chain and financial-action risk disproportionate to a simple public-data lookup.
Confidence: 84%Severity: 68%
Audit Metadata