govinfo-us-code-section

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent, but it relies on a directly downloaded, unverifiable helper script and forwards a wallet private key to that script for signing. The third-party gateway model may be functional, yet the install trust and credential exposure are disproportionate for a simple statute lookup skill.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fgovinfo-us-code-section%2F@f0e39de5a3941fcd729a4d6fa25dea1c18869ab82dccab133acb92ea19b13ac0