census-geocode-batch

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's geocoding purpose is coherent, but it routes address data and optional payment authorization through fittings.sh rather than directly to the official Census endpoint, and it recommends downloading executable helper code without pinning or verification. The footprint is plausible for a paid API wrapper, yet the intermediary data flow and plaintext wallet-key model create medium risk.

Confidence: 83%Severity: 56%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fcensus-geocode-batch%2F@1ab9a0ceaa8efb9f65fa2d907d77c1abc694da084588148045354026ddfea8af