skills/fittings-sh/skills/valid-lei/Socket

valid-lei

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is narrow, but the skill’s actual footprint includes remote code download, local execution, wallet private key handling, and autonomous micropayment signing. Those capabilities are disproportionate to a simple LEI checksum check, and the unverified `call.mjs` plus key forwarding triggers high supply-chain and credential risk.

Confidence: 85%Severity: 85%

Audit Metadata

Analyzed At

Aug 18, 2026, 05:18 AM

Package URL

pkg:socket/skills-sh/fittings-sh%2Fskills%2Fvalid-lei%2F@d7baa6884fbe4b0c16faab9f82d9a596b61531abd3b007df381a3df88862820a