fittings-sec-ticker-resolve
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is narrow, but the skill’s actual footprint includes remote code download/execution and forwarding a wallet private key to that downloaded client for off-chain payment signing. The data flow to fittings.sh is plausible for a paid proxy service, but the install trust and credential scope are too strong for a simple SEC ticker resolver.
Confidence: 87%Severity: 82%
Audit Metadata