nasa-power-point
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is plausible, but the actual footprint is broader than a simple NASA data skill: it routes requests through a third-party paid gateway, instructs download-and-execute of an unpinned helper, and forwards a blockchain private key to that helper for signing. This is not confirmed malware, but it is high-risk and disproportionate to a weather-data retrieval task.
Confidence: 82%Severity: 84%
Audit Metadata