dailymed-spl-fetch

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is drug-label retrieval, but the actual footprint includes downloading unverified executable code, routing requests through a third-party gateway, and supplying a plaintext wallet private key to that code for autonomous payment authorization. That is coherent with the gateway's business model, but high-risk and disproportionate compared with directly reading public DailyMed data.

Confidence: 89%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fdailymed-spl-fetch%2F@e6a830c0b7861d54cce9bb0a975fb07062320aaf9a0f8360005159ffcaa2e90a