time-business-days
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is simple business-day calculation, but the skill’s real footprint includes downloading and executing an unverified helper script and giving it a blockchain private key for payment signing. The service domain and endpoint look coherent, yet the install and credential path are disproportionate and trigger the mandatory high-risk floor for unverifiable executables that receive credentials.
Confidence: 86%Severity: 84%
Audit Metadata