fittings-geo-distance

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core geo-distance purpose is coherent, and the service/data flow stay on the stated domain, but the skill couples a simple compute API to remote-script execution and wallet-key-based payment authorization. This is not confirmed malware, yet it poses medium risk due to download-execute install hygiene and autonomous financial capability.

Confidence: 84%Severity: 53%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-geo-distance%2F@5cf61e54293f094400a7c5315a58e96eee6370d37e80c7a8cb4b9b277ea5afe8