dailymed-spl-fetch
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is drug-label retrieval, but the actual footprint includes downloading unverified executable code, routing requests through a third-party gateway, and supplying a plaintext wallet private key to that code for autonomous payment authorization. That is coherent with the gateway's business model, but high-risk and disproportionate compared with directly reading public DailyMed data.
Confidence: 89%Severity: 84%
Audit Metadata