calc-worksheet
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is a deterministic calculation API, but the skill’s actual footprint includes remote helper download, execution of mutable same-domain code, and forwarding a blockchain private key to that helper for payment authorization. The billing model explains some of this, but the credential scope and supply-chain trust are disproportionate to a calculator skill.
Confidence: 86%Severity: 81%
Audit Metadata