precip

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The weather-data purpose is coherent and the first-party `precip.ai` API/docs domains appear legitimate, but the skill's operational path introduces unnecessary trust in an external `orth` CLI whose provenance was not verified. Direct API use looks benign; the main risk is credential/request forwarding and execution through unverified third-party tooling plus partial gateway mediation via Orthogonal/x402.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:59 PM
Package URL
pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Fprecip%2F@492566037691cf8b21599ba167ccdadbacc2915d