fec-candidate-search

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose is coherent, but it combines a remote fetched executable helper with plaintext wallet-key use and paid off-chain authorization through the service operator. Same-org provenance reduces the chance of outright malware, yet the install/execution and credential-forwarding model are broader than a simple FEC lookup needs.

Confidence: 84%Severity: 66%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ffec-candidate-search%2F@30e528bd1767f75f62ca094edc3a7a5080a7fd3b4d5442ce4bdf09edfbcb72e3