calc-worksheet

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is a deterministic calculation API, but the skill’s actual footprint includes remote helper download, execution of mutable same-domain code, and forwarding a blockchain private key to that helper for payment authorization. The billing model explains some of this, but the credential scope and supply-chain trust are disproportionate to a calculator skill.

Confidence: 86%Severity: 81%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:16 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fcalc-worksheet%2F@5d659dbb1b01e4dcd0f3ca1aa78cac5e2d790b904d586756f296eacf7c12ebfd