dailymed-spl-search

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is medical label search, but the actual footprint routes requests through a paid third-party gateway, asks for a blockchain private key, and recommends running a remotely downloaded helper script. That combination is broader than necessary for DailyMed access and creates meaningful supply-chain and credential-forwarding risk, even without clear proof of malicious intent.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fdailymed-spl-search%2F@3448c0aec29c1df99dcc7e0b0e9a49f9ff7c937d2d7a9f378e57ae6b0c5d5dd8