fittings-tz-offset-at

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The purpose is coherent, but the skill’s footprint is larger than necessary: a remote-downloaded helper script is executed and given a plaintext wallet private key to authorize payments. Because an unverifiable downloaded client receives credentials and can trigger financial actions, this is high security risk even without evidence of confirmed malware.

Confidence: 88%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:35 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-tz-offset-at%2F@7e4e3bdc37773662467e261cd9edb8562aec8d50206bd358033cdb515c12493b