fx-ecb-timeseries

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the service purpose is coherent, but the trust model is not proportionate. The skill relies on a raw downloaded helper script and then passes it a blockchain private key for payment authorization, creating a high supply-chain and credential-forwarding risk even though the API endpoint itself matches the stated FX data service.

Confidence: 87%Severity: 86%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ffx-ecb-timeseries%2F@043dc3b8a73d1a0bce46bd9c6cacb0fcb352eadfe9d00b2b77c0320024ce5a86