dailymed-spl-search
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is medical label search, but the actual footprint routes requests through a paid third-party gateway, asks for a blockchain private key, and recommends running a remotely downloaded helper script. That combination is broader than necessary for DailyMed access and creates meaningful supply-chain and credential-forwarding risk, even without clear proof of malicious intent.
Confidence: 86%Severity: 78%
Audit Metadata