skills/fittings-sh/skills/govinfo-public-law/Socket

govinfo-public-law

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is a public-law lookup, but the skill relies on an unverifiable remote helper script and forwards a live wallet private key to it for payment signing. Routing government-data access through a third-party paid gateway is possible, but the install trust and credential-handling footprint are disproportionate to the task.

Confidence: 88%Severity: 84%

Audit Metadata

Analyzed At

Aug 18, 2026, 05:18 AM

Package URL

pkg:socket/skills-sh/fittings-sh%2Fskills%2Fgovinfo-public-law%2F@56b77aca2001ec11d8679e38a1f0598c77abec06802cbd36ea7052e174eb7b5c