openaq-data-fetch

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The OpenAQ Data Fetch skill presents a coherent footprint: it is a developer tooling utility for querying the OpenAQ API and fetching historical data from the AWS Open Data S3 archive using environment-based configuration. Its data flows primarily involve legitimate API calls and S3 downloads with outputs to local storage. There are no evident credential-forwarding, unsigned executables, or covert data exfiltration paths. Overall, the footprint is Benign to Low Risk, with reasonable expectations for proper secure handling of API keys and AWS credentials at runtime. Recommend ensuring secure handling of environment variables, least-privilege IAM for S3 access, rate limiting against API quotas, and clear logging to trace data movements.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 08:51 AM
Package URL
pkg:socket/skills-sh/tiangong-ai%2Fskills%2Fopenaq-data-fetch%2F@13eb1b42c767a7f80c9a5474b9e07e14b8d962bd