skills/alvarovillalbaa/plugins/geo/Socket

geo

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's stated purpose is benign and mostly documentation-oriented, but it instructs transitive external skill installation through an opaque local installer and hidden registry mappings. No direct credential theft or malicious payload is shown, yet install trust and data-flow visibility are insufficient for a benign classification.

Confidence: 80%Severity: 58%

Audit Metadata

Analyzed At

Jul 5, 2026, 04:25 PM

Package URL

pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Fgeo%2F@4e072bf55a249f5d3342f2b7e369e3af12edbd35dd503371b99291ffbb9e4ca5