hts-search
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's purpose is coherent, but its trust model is not proportionate to a tariff lookup. The main risks are curl-downloaded executable code, routing through a third-party gateway instead of the official source, and exposing a wallet private key to that script for off-chain payment signing.
Confidence: 84%Severity: 79%
Audit Metadata