geo-lookup

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s geolocation purpose is coherent, but it routes requests through a paid third-party gateway and requires a private blockchain wallet key, which is a high-sensitivity credential for a lookup tool. The behavior is not clearly malicious, yet the credential scope and proxy data flow are broader and riskier than a direct official-API integration.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fgeo-lookup%2F@1f975e6e437a9070349ffbb46125fdae6b7006e8d65f011c0f3c5d5fdc61043d