fittings-sec-filing-search

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s stated SEC-filing-search purpose is coherent, but its operational model is high risk: it asks the agent to fetch an unverifiable remote script and then provide a wallet private key to that script for paid calls. That combination is disproportionate to the task and creates a strong supply-chain and credential-forwarding risk, even though the service description itself appears legitimate.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-sec-filing-search%2F@10788484adc535fc7940d7f0fc888986c43e207dbfe8c95eeda1e64d8b5e20da