geofeed-tuner
Warn
Audited by Socket on Apr 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core validation/reporting behavior matches the stated geofeed-tuning purpose, but the skill expands scope by sending feed-derived location data to Fastah's MCP service run by a third party relative to the community publisher. This is not outright malicious, yet the external data flow and generated-script execution make it a medium-risk skill rather than a benign local-only validator.
Confidence: 83%Severity: 58%
Audit Metadata