civic-record

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose is coherent, but its real footprint routes all requests through a third-party gateway and asks the user to expose a blockchain private key to enable paid calls. That is disproportionate for accessing public government records and creates meaningful credential and data-flow risk, though the text does not show confirmed malware or overt exfiltration beyond the stated gateway/payment model.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:16 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fcivic-record%2F@344d37412fa12b842e0b55f5146eec9ff90dc58329a54ffd062c705aa43b214f