road-nearest

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core API purpose is coherent, but the skill relies on a directly downloaded executable script and then gives that script a blockchain private key to authorize spending. That combination creates a high supply-chain and credential-forwarding risk even without clear evidence of malicious intent.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Froad-nearest%2F@8413f075202f585d6b1dfa1b74bd54915db20d74de03ba4c32934aba3a570e4a