fittings-time-zone-clock

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent time-zone API skill, but it carries real financial and credential risk because it can spend USDC via a plaintext private key and relies on an unpinned downloaded helper script. This looks more vulnerable/high-trust than malicious.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-time-zone-clock%2F@3625f36aff0dc02bfc88aee23b4e2c9e4138eb065ff2cc96733370ae9ea49d12