pubmed-citation-search

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s search purpose is coherent, but its execution model relies on an unverified remote helper script and passes a plaintext wallet private key into that script. The gateway/payment flow may be legitimate, yet the install trust and credential-forwarding footprint are disproportionate enough to make this high risk.

Confidence: 89%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fpubmed-citation-search%2F@76d5d7dba3378015df676a0db1276dcf971ec08a644a87eff11613df63938be3