identifier-check

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's core purpose is coherent, but it normalizes sending identifiers and plaintext to a third-party gateway and requires a raw USDC wallet private key to pay for routine compute tasks. That combination is more sensitive than necessary, especially for random generation and hashing that should usually be local.

Confidence: 86%Severity: 71%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fidentifier-check%2F@dcd2bae362c31d36e637a94d587f447d5c845d87933680a2e7269086c1e2d90e