fda-drug-recall

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The lookup purpose is plausible, but the skill adds a paid third-party gateway, remote script download, and wallet-private-key handling that are not proportionate to a simple FDA recall check. The main risk is supply-chain trust plus credential forwarding to helper code fetched from the service operator.

Confidence: 83%Severity: 81%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:19 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ffda-drug-recall%2F@881845491c224baa03a8fa349782f9afa90e58136f0ac4ce20fcedb2f7dfa13d