naics-lookup

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is coherent, and the service/domain relationship appears internally consistent, but the skill relies on downloading and executing an unverifiable helper script and then passing it a plaintext wallet private key. That combination makes the install/payment path high risk even without direct evidence of malicious exfiltration.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:19 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fnaics-lookup%2F@0e74c63064b4313b18778d7bf92a00211039d8acdeaaa5540e0d73bb7b90b777