nasa-power-point

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the actual footprint is broader than a simple NASA data skill: it routes requests through a third-party paid gateway, instructs download-and-execute of an unpinned helper, and forwards a blockchain private key to that helper for signing. This is not confirmed malware, but it is high-risk and disproportionate to a weather-data retrieval task.

Confidence: 82%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fnasa-power-point%2F@7bdaac4a7da07d612f62f56f37cd237a4e7c8f1e37e3fee1c48dc58e063c2fab