epa-tri-facilities

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The lookup purpose is plausible and mostly aligned, but the trust model is disproportionate: a public-data skill asks the agent to download and run an unverifiable script, then pass it a wallet private key for paid requests through a third-party gateway. The main risk is credential forwarding to unverified code, not confirmed malware.

Confidence: 85%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fepa-tri-facilities%2F@ba9f827ef2b42b3fa42aa41e5d715f6bbf23a11098143365aee5cafd64aaedd4