vat-eu-validate
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated VAT-validation purpose is plausible, but the actual footprint is larger than necessary. The skill routes official-data access through a third-party gateway, uses a remote unpinned helper script, and asks for a blockchain private key for payment authorization. Those pieces are disclosed rather than hidden, but they are not proportionate to a simple VAT lookup and create meaningful supply-chain and credential-forwarding risk.
Confidence: 86%Severity: 82%
Audit Metadata