fittings-swpc-space-weather-scales

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is simple space-weather retrieval, but the skill routes calls through a paid third-party service, asks for a blockchain private key, and can authorize spending via downloaded helper code. The install source appears same-org and plausibly official, which lowers malware confidence, but the credential scope and payment flow are disproportionate to the task.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-swpc-space-weather-scales%2F@40a4f70d0871b039440ee557d0fcc01a68c1f8be8a91bb5af0e74dc0cb3fe1f3