tax-us-state-sales-rate

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The tax-rate purpose is plausible, but the skill couples a simple lookup to downloaded off-registry code and a plaintext blockchain private key, with autonomous spending and gateway-mediated payment flow. That footprint is disproportionate to the task and creates high supply-chain and credential-forwarding risk, though it is not confirmed malware.

Confidence: 86%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ftax-us-state-sales-rate%2F@925c537ae5977af01030e95c571cd3b3327a584a3c89a1fe5fd6c2aba3a59117