fittings-census-geocode-batch

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s core purpose is coherent, but its trust model is not: it routes address data through a third-party paid gateway and recommends downloading an unpinned remote helper script that may receive a blockchain private key for signing. This is disproportionate enough to warrant caution even though the service description and upstream Census provenance are plausible.

Confidence: 87%Severity: 80%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-census-geocode-batch%2F@2163e1344ea1f29c04b69e254331b1b195960f8ee6a61c5a88f8016959dfb8df