fittings-sec-filing-search
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill’s stated SEC-filing-search purpose is coherent, but its operational model is high risk: it asks the agent to fetch an unverifiable remote script and then provide a wallet private key to that script for paid calls. That combination is disproportionate to the task and creates a strong supply-chain and credential-forwarding risk, even though the service description itself appears legitimate.
Confidence: 87%Severity: 84%
Audit Metadata