fx-ecb-rate

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated FX-rate purpose is coherent, but the trust model is not proportionate. A raw downloaded script from fittings.sh is executed locally and given a wallet private key for signing, creating a high supply-chain and credential-forwarding risk despite no clear evidence of overt malware.

Confidence: 86%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ffx-ecb-rate%2F@7bde586496b0218a171df2af255e4275ca132539b8f78e27fe78c35ae70d6033