geo-elevation
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core API purpose is coherent, but the skill couples a simple elevation lookup to downloaded remote client code and a plaintext blockchain private key. Data flows are disclosed and not overtly deceptive, yet the install-and-execute pattern plus credential forwarding and autonomous micropayments make the skill medium risk rather than benign.
Confidence: 81%Severity: 58%
Audit Metadata