fittings-text-profanity-filter

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's moderation purpose is coherent, but its operational footprint is not proportionate: it asks the agent to download and run a remote helper script and then provide a plaintext wallet private key to that helper for paid execution. The API destination matches the stated service, so this is not confirmed malware, but the combination of remote code execution, third-party payment facilitation, and credential forwarding creates a high security risk for a simple profanity check.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-text-profanity-filter%2F@ce547fcad276c1ea2bf95d36352baab71179322f58eb01b8b353d067df1fb0da