treasury-exchange-rate
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated purpose is coherent, but its actual footprint is broader than necessary for public Treasury rate lookup. The main concerns are third-party routing through fittings.sh, a raw downloaded helper script, and forwarding a wallet private key to local payment logic for a simple data service. This looks more like a monetized gateway with nontrivial trust requirements than direct Treasury data access.
Confidence: 85%Severity: 62%
Audit Metadata