skills/fittings-sh/skills/fema-flood-zone/Socket

fema-flood-zone

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s flood-zone purpose is plausible, but it asks the agent to fetch an unpinned remote script and hand it a raw blockchain private key for payment signing. The main risk is not the FEMA lookup itself; it is the unverifiable helper plus credential forwarding through a third-party gateway.

Confidence: 90%Severity: 86%

Audit Metadata

Analyzed At

Aug 18, 2026, 05:17 AM

Package URL

pkg:socket/skills-sh/fittings-sh%2Fskills%2Ffema-flood-zone%2F@e1f71c9c556cb9da8dd8fc1fc7db3391a69942b9ccfc0455cc5786229c2dcf70