text-char-edit

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core text-editing purpose is coherent, but the skill couples it to a remote, unpinned helper script that receives a wallet private key and can authorize real spending. Data flows broadly match the claimed x402 payment model, yet the install and credential-forwarding trust model is disproportionate for a simple text utility.

Confidence: 89%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ftext-char-edit%2F@a65370bf7c609642b66ae9224566f84c5d34fc59898323c5d02b102a782cb6d8