govinfo-us-code-section
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s stated purpose is coherent, but it relies on a directly downloaded, unverifiable helper script and forwards a wallet private key to that script for signing. The third-party gateway model may be functional, yet the install trust and credential exposure are disproportionate for a simple statute lookup skill.
Confidence: 90%Severity: 84%
Audit Metadata