fcc-census-block

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose is coherent, and the FCC data-source claim is plausible, but the actual access path relies on downloading and executing an unpinned helper from fittings.sh and optionally handing it a plaintext wallet private key. That combination makes the install/data-flow footprint disproportionally risky for a simple geocoding-style lookup service.

Confidence: 87%Severity: 86%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Ffcc-census-block%2F@f53ef885b6ee2b4a23f36538f026ec41734ff903c889492d15456476a7ae3371