precip
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The weather-data purpose is coherent and the first-party `precip.ai` API/docs domains appear legitimate, but the skill's operational path introduces unnecessary trust in an external `orth` CLI whose provenance was not verified. Direct API use looks benign; the main risk is credential/request forwarding and execution through unverified third-party tooling plus partial gateway mediation via Orthogonal/x402.
Confidence: 84%Severity: 74%
Audit Metadata