c-location

Warn

Audited by Socket on Mar 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill conceptually fits its stated purpose of location-based search and directions via Apple Maps. However, the footprint is currently incongruent due to reliance on an unverifiable external CLI (goplaces) with no installation/source verification details. This introduces supply-chain risk and credential exposure concerns should sensitive location data be mishandled. Given the combination of unverifiable binary installation and location data handling, the skill is Suspicious overall and should only be used with a trusted, verifiable goplaces source and clear data/privacy disclosures.

Confidence: 65%Severity: 75%
Audit Metadata
Analyzed At
Mar 9, 2026, 08:45 AM
Package URL
pkg:socket/skills-sh/daxaur%2Fopenpaw%2Fc-location%2F@b316c0118d996314d4f5ca6300e12cf9dfab7ea3
Security Audit — socket — c-location