fec-financial-totals
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s civic-data purpose is plausible, but its real footprint relies on a third-party gateway and a downloaded executable helper that accepts a wallet private key. The main concern is not the FEC lookup itself, but the unverifiable download-plus-credential-signing flow and the mismatch between cited source provenance and actual data/payment routing.
Confidence: 87%Severity: 84%
Audit Metadata