fda-drug-label

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the skill’s actual footprint is broader than a simple FDA-label lookup. It routes data through a third-party gateway, downloads executable helper code from that gateway, and can authorize crypto payments using a plaintext private key. These behaviors are not necessarily malicious, but they create high trust and financial-risk requirements disproportionate to a medical reference lookup.

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ffda-drug-label%2F@ad67124470ef34864c2a93a70fa5d17d3494e87ba3fa2e4bcfe1a72581f360ef