fittings-geo-forward-geocode

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The geocoding purpose is coherent, but the implementation relies on remotely fetched executable code and asks that code to handle a blockchain private key for paid calls. That combination makes the skill suspicious and high risk even without evidence of confirmed malicious exfiltration.

Confidence: 86%Severity: 84%
Audit Metadata
Analyzed At
Aug 17, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/fittings-sh%2Ffittings%2Ffittings-geo-forward-geocode%2F@232700dac78bc6704cd19138336e3b47bbeca8a7bb573526d8b267e871b1d057