sec-ticker-financials

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the skill’s footprint is broader than needed: it downloads and runs remote helper code, routes public SEC lookups through a third-party paid gateway, and asks the agent to expose a plaintext wallet private key to authorize spending. The payment flow and credential handling are disproportionate for a simple financial-data retrieval skill.

Confidence: 85%Severity: 83%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fsec-ticker-financials%2F@55ac8d9173dfec786fdafbb3146e55983479a3ae84c858f66c21edc993b32c06