census-address-geographies
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s geocoding purpose is coherent, and its network endpoint matches the described service, but it depends on downloading and running an unverifiable helper script from fittings.sh and optionally handing that script a plaintext wallet private key. That combination creates a disproportionate supply-chain and credential-forwarding risk for a simple address-to-geography lookup.
Confidence: 87%Severity: 84%
Audit Metadata