hts-search

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but its trust model is not proportionate to a tariff lookup. The main risks are curl-downloaded executable code, routing through a third-party gateway instead of the official source, and exposing a wallet private key to that script for off-chain payment signing.

Confidence: 84%Severity: 79%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fhts-search%2F@50c5f913f41487c8663a1c420e5cfe0917751a2160a958558acc6a07b0e4d2eb