fittings-geo-elevation

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose and API behavior are coherent, and the upstream USGS provenance claim is plausible. The main concerns are the curl-downloaded executable script and the requirement to expose a raw wallet private key for autonomous micropayments; these are proportionate to the stated payment model but still materially risky.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-geo-elevation%2F@21e6d6a0ee4911feed5c0e6433398d8c10f71c27a82d900b6a28488d906cdb08