lei-lookup

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Suspicious. The LEI lookup purpose is coherent, but the skill relies on downloading and executing an unverifiable script from fittings.sh and then forwarding a blockchain private key to it for payment authorization. The gateway model and small spend cap may be legitimate, yet the install trust and credential-handling footprint are disproportionate to a simple LEI lookup and create high security risk.

Confidence: 84%Severity: 86%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Flei-lookup%2F@f8515fdaf4ec7e1361d1bd73c9943ac477e8540a9900facc50f88b2236a385bf