gov-federal-spending

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the actual footprint is broader than needed: a public-record lookup is routed through a paid third-party gateway, requires downloading an unverifiable remote client script, and can use a plaintext blockchain private key for spending. The data source claim is benign, but the install trust and credential-forwarding model are not proportionate to the task.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fgov-federal-spending%2F@9fd86dfd9645c840a506b845dc319e27e621a2851dee0d1a5ca4603203d5ae85