fda-drug-label
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is plausible, but the skill’s actual footprint is broader than a simple FDA-label lookup. It routes data through a third-party gateway, downloads executable helper code from that gateway, and can authorize crypto payments using a plaintext private key. These behaviors are not necessarily malicious, but they create high trust and financial-risk requirements disproportionate to a medical reference lookup.
Confidence: 85%Severity: 78%
Audit Metadata