lei-lookup
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Suspicious. The LEI lookup purpose is coherent, but the skill relies on downloading and executing an unverifiable script from fittings.sh and then forwarding a blockchain private key to it for payment authorization. The gateway model and small spend cap may be legitimate, yet the install trust and credential-handling footprint are disproportionate to a simple LEI lookup and create high security risk.
Confidence: 84%Severity: 86%
Audit Metadata