gov-congress-bill

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent, but the skill adds a paid third-party gateway, optional private-key-based payment signing, and a remote helper-script download. This is not clearly malicious, yet the financial capability and mutable installer make it higher risk than a normal government-data lookup skill.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fgov-congress-bill%2F@6c78965cf5fd62a23a531625f0bf529f455daed352bc201e832440f1f479c569