orangebook-therapeutic-equivalence

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The medical lookup purpose is coherent, but the skill’s footprint is enlarged by an unverified remote helper script and a requirement to provide a live wallet private key for paid use. Data flows and payment routing through fittings.sh are plausible for the service, yet the combination of download-execute plus credential-bearing financial authorization makes this higher risk than a typical API skill.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:19 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Forangebook-therapeutic-equivalence%2F@830d68b9753f55f6ae153a7f60fdd4744e9d0dc2207081f25b77a3c5c0220b33