epa-tri-facilities
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The lookup purpose is plausible and mostly aligned, but the trust model is disproportionate: a public-data skill asks the agent to download and run an unverifiable script, then pass it a wallet private key for paid requests through a third-party gateway. The main risk is credential forwarding to unverified code, not confirmed malware.
Confidence: 85%Severity: 84%
Audit Metadata