fittings-census-geocode-batch
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s core purpose is coherent, but its trust model is not: it routes address data through a third-party paid gateway and recommends downloading an unpinned remote helper script that may receive a blockchain private key for signing. This is disproportionate enough to warrant caution even though the service description and upstream Census provenance are plausible.
Confidence: 87%Severity: 80%
Audit Metadata