census-address-geographies

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s geocoding purpose is coherent, and its network endpoint matches the described service, but it depends on downloading and running an unverifiable helper script from fittings.sh and optionally handing that script a plaintext wallet private key. That combination creates a disproportionate supply-chain and credential-forwarding risk for a simple address-to-geography lookup.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:16 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fcensus-address-geographies%2F@88cd2a288bb5ab57a556efdda6a7b07913e40f271fc9fda945ce439d0357fda8