skills/fittings-sh/skills/tsunami-center-bulletins/Socket

tsunami-center-bulletins

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the actual footprint is broader than needed for public NOAA data. The main risk is instructing the agent to download and run an unverifiable remote client, then pass it a plaintext wallet private key to authorize payments through a third-party gateway.

Confidence: 86%Severity: 83%

Audit Metadata

Analyzed At

Aug 18, 2026, 05:19 AM

Package URL

pkg:socket/skills-sh/fittings-sh%2Fskills%2Ftsunami-center-bulletins%2F@ff3e2fcda05d2e67eb1db30dbddc570392dfff13f653fec9554540c8afd2ee26