vat-eu-validate

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated VAT-validation purpose is plausible, but the actual footprint is larger than necessary. The skill routes official-data access through a third-party gateway, uses a remote unpinned helper script, and asks for a blockchain private key for payment authorization. Those pieces are disclosed rather than hidden, but they are not proportionate to a simple VAT lookup and create meaningful supply-chain and credential-forwarding risk.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fvat-eu-validate%2F@ea7b1378fad1fcf271e5e321c108d731b1fa73bb0240a1b7549a27ae4abc9c0d