gov-federal-spending
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is plausible, but the actual footprint is broader than needed: a public-record lookup is routed through a paid third-party gateway, requires downloading an unverifiable remote client script, and can use a plaintext blockchain private key for spending. The data source claim is benign, but the install trust and credential-forwarding model are not proportionate to the task.
Confidence: 87%Severity: 84%
Audit Metadata