fittings-tsunami-center-bulletins

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose is coherent and the network targets appear to be the publisher’s own service, but the skill relies on downloading a remote client script and optionally forwarding a blockchain private key into that client to authorize paid requests. That combination is higher risk than a normal read-only bulletin skill, though not strong evidence of malware.

Confidence: 82%Severity: 68%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-tsunami-center-bulletins%2F@40cad5333c6c991b4482b87d53ca94212ed80f62a574338fbd81430387801973