geo-lookup
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s geolocation purpose is coherent, but it routes requests through a paid third-party gateway and requires a private blockchain wallet key, which is a high-sensitivity credential for a lookup tool. The behavior is not clearly malicious, yet the credential scope and proxy data flow are broader and riskier than a direct official-API integration.
Confidence: 85%Severity: 72%
Audit Metadata