quake-recent

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the earthquake-query purpose is plausible, but the paid path is disproportionate because it requires downloading an unverified script and forwarding a plaintext wallet private key to it. The free schema/quote calls are low risk, but the real-call flow creates a high supply-chain and credential exposure risk inconsistent with a simple data lookup skill.

Confidence: 87%Severity: 85%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fquake-recent%2F@84e7a4f5578a547470f2a418a95c80afd1e1078ee79a330250eb5fe21e42f3f7