nhtsa-safety-ratings

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The purpose is plausible, but the footprint is not proportionate: a public government-data lookup is monetized through a third-party gateway, requires a plaintext blockchain private key, and may fetch executable helper code from the publisher domain. This is not confirmed malware, but the intermediary data flow and wallet-based payment mechanism materially raise risk.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fnhtsa-safety-ratings%2F@d06b5c19505cceec2e287f29ac56f26170571f986e5cdb5e950ff33055f2c2f2