geo-elevation

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core API purpose is coherent, but the skill couples a simple elevation lookup to downloaded remote client code and a plaintext blockchain private key. Data flows are disclosed and not overtly deceptive, yet the install-and-execute pattern plus credential forwarding and autonomous micropayments make the skill medium risk rather than benign.

Confidence: 81%Severity: 58%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:18 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fgeo-elevation%2F@11975062430f64e85d9171ed8eba02d8ca20bbc83794ad18d50b01bf52d27b1d