eia-fuel-price

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose is coherent, but its real footprint relies on a third-party proxy and a downloaded remote client script that handles wallet-based payment. The main risks are raw script execution from `fittings.sh`, credential exposure to that client, and routing a public-data lookup through a non-official intermediary.

Confidence: 83%Severity: 72%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Feia-fuel-price%2F@35f1d1671c46d0a30f77d4fc2ee4fdd0a8f10fef8864fbe2087fae05f54bc1b4