time-business-days

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is simple business-day calculation, but the skill’s real footprint includes downloading and executing an unverified helper script and giving it a blockchain private key for payment signing. The service domain and endpoint look coherent, yet the install and credential path are disproportionate and trigger the mandatory high-risk floor for unverifiable executables that receive credentials.

Confidence: 86%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ftime-business-days%2F@46783db203cda56c0e11ede97aae880824d6aa3d4780bee892eb1e5c71124e21