fmt-json-flatten

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core API purpose is coherent, but the skill combines a direct download-and-use helper script with plaintext wallet-key handling for a paid third-party service. That footprint is disproportionate for a simple JSON transformation that could be done locally, and the unverifiable helper raises supply-chain and credential-forwarding concerns.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ffmt-json-flatten%2F@242b830f2cbbbb06068faac5430ef8b36f3ec6ac00e7db323dab6f37e0ed928f