ctgov-trial-search

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the actual footprint is larger: a clinical search skill routes requests through a third-party paid gateway, downloads executable helper code from that gateway, and asks for a blockchain private key to authorize spending. That combination is disproportionate to simple trial search and creates notable supply-chain and credential-forwarding risk.

Confidence: 88%Severity: 82%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fctgov-trial-search%2F@e8a2c067b1953afb33f5c4b687c53bae5eb67d77b5af19220147e9fb128aea7d