civic-record
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose is coherent, but its real footprint routes all requests through a third-party gateway and asks the user to expose a blockchain private key to enable paid calls. That is disproportionate for accessing public government records and creates meaningful credential and data-flow risk, though the text does not show confirmed malware or overt exfiltration beyond the stated gateway/payment model.
Confidence: 84%Severity: 72%
Audit Metadata