fittings-sec-company-filings

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core SEC-filings purpose is coherent, but the skill mixes a paid third-party gateway, remote helper download, and raw wallet-key signing. It is not clearly malicious, yet its install and payment model create meaningful supply-chain and financial-action risk disproportionate to a simple public-data lookup.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-sec-company-filings%2F@9a4161cb10239149354948ea42bc38f1e0e2eae8be7e5214f436381060bc17fe