ctgov-trial-search
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is plausible, but the actual footprint is larger: a clinical search skill routes requests through a third-party paid gateway, downloads executable helper code from that gateway, and asks for a blockchain private key to authorize spending. That combination is disproportionate to simple trial search and creates notable supply-chain and credential-forwarding risk.
Confidence: 88%Severity: 82%
Audit Metadata