fda-drug-recall
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The lookup purpose is plausible, but the skill adds a paid third-party gateway, remote script download, and wallet-private-key handling that are not proportionate to a simple FDA recall check. The main risk is supply-chain trust plus credential forwarding to helper code fetched from the service operator.
Confidence: 83%Severity: 81%
Audit Metadata