text-profanity-filter

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core purpose and endpoint are coherent, and data goes to the named service, but the skill asks the agent to download and run an unpinned remote helper script and then expose a wallet private key to it for payment signing. This is not clearly malicious, but the install-trust and credential-forwarding footprint is disproportionate enough to warrant caution.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ftext-profanity-filter%2F@48bb6c8aadd68bcac38f0ee2cf523aaceddba7a7dd67c514c721f50d4eec58e3