fittings-geo-forward-geocode
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The geocoding purpose is coherent, but the implementation relies on remotely fetched executable code and asks that code to handle a blockchain private key for paid calls. That combination makes the skill suspicious and high risk even without evidence of confirmed malicious exfiltration.
Confidence: 86%Severity: 84%
Audit Metadata