census-geography-bundle
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated geography-lookup purpose is plausible, but the skill’s actual footprint includes downloading unpinned executable code from the service domain and passing a plaintext wallet private key to that helper. The third-party gateway model may be legitimate, yet the install trust and credential-forwarding design are disproportionate to a simple Census lookup and create high security risk.
Confidence: 85%Severity: 84%
Audit Metadata