text-similarity

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is mostly coherent with its stated purpose, but it carries meaningful risk because a basic text-similarity task is coupled to remote client download and blockchain private-key based payment authorization. This looks more suspicious than malicious: the main concerns are supply-chain trust in call.mjs and forwarding a wallet key into payment client logic for a low-level utility service.

Confidence: 82%Severity: 63%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:19 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ftext-similarity%2F@4809750561b700ba9fc2034e0a0def4aa8c9299d018b65445ffd363ad73b30dd