geo-distance
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is narrow and plausible, and the network endpoints match that purpose, but the skill asks the agent to download and run an unverifiable remote script and then hand it a wallet private key for payment signing. That footprint is broader and riskier than necessary for a geo-distance utility, so overall risk is high even without confirmed malicious intent.
Confidence: 88%Severity: 83%
Audit Metadata