lei-hierarchy

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill’s actual footprint is larger than a simple data lookup because it downloads and runs remote helper code, then can use a wallet private key to authorize spending through a third-party gateway. The main risk is credential/signing-material exposure to unverifiable downloaded code and indirect data/payment routing through fittings.sh rather than direct use of GLEIF.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Flei-hierarchy%2F@8e7370b22f057980cbf753b4e793efd36bf67fd419cba4cc1c8bf45ad833c7a5