fittings-time

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s service calls fit its stated date/time purpose, but its trust footprint is larger than expected: it relies on remote hosted tooling, may install another skill, and most importantly asks for a blockchain private key to authorize paid requests. That makes it a coherent but high-trust integration rather than obvious malware; use only with a tightly funded disposable wallet and explicit per-call approval.

Confidence: 81%Severity: 76%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-time%2F@dde85a3010c784d2d66f1407d22e1f34ee6b03b3ed6bed26fe3fa132c2054d6e