fema-disaster-declarations
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated FEMA lookup purpose is plausible, but the actual footprint includes remote code download, third-party gateway dependence, and forwarding wallet-signing capability to service-supplied client code. The core mismatch is a public-data lookup requiring crypto payment infrastructure and plaintext private-key handling through unverifiable executable code.
Confidence: 89%Severity: 83%
Audit Metadata