cfr-section-text

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is coherent, but the skill relies on remotely fetched executable code and a plaintext blockchain private key for payment. The main concern is install/execution trust and credential exposure to unseen client logic, not confirmed malicious behavior.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fcfr-section-text%2F@5bb36d6ee20f67452f4b80a6b54e5946065766bf9a90730a52a40f2d26cb3068