fec-financial-totals

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s civic-data purpose is plausible, but its real footprint relies on a third-party gateway and a downloaded executable helper that accepts a wallet private key. The main concern is not the FEC lookup itself, but the unverifiable download-plus-credential-signing flow and the mismatch between cited source provenance and actual data/payment routing.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ffec-financial-totals%2F@6f13bc71ea5f18d91e520c72af367a52547d32a51ac62e04c2a63caec2601a2d