fmt-json-flatten
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core API purpose is coherent, but the skill combines a direct download-and-use helper script with plaintext wallet-key handling for a paid third-party service. That footprint is disproportionate for a simple JSON transformation that could be done locally, and the unverifiable helper raises supply-chain and credential-forwarding concerns.
Confidence: 84%Severity: 82%
Audit Metadata