solar-sun-position

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated solar-data purpose is coherent, but the skill couples it to a remote-downloaded helper that handles a blockchain private key and authorizes spending. That install and credential flow is disproportionate for a simple API client and creates high supply-chain and wallet-theft risk even if the service itself is legitimate.

Confidence: 84%Severity: 85%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fsolar-sun-position%2F@dc99713357e51add06581d3078a5d413326cf67c8bab3184d5001103be27f07a