geo-reverse-geocode

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s core capability matches its stated geocoding purpose and its network targets stay on the publisher’s domain, but it combines a raw remote-script install path with forwarding a blockchain private key into vendor-controlled code for automatic payment signing. That is higher-risk than a typical geocoding skill and only moderately proportionate to the task.

Confidence: 83%Severity: 69%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:17 AM
Package URL
pkg:socket/skills-sh/fittings-sh%2Fskills%2Fgeo-reverse-geocode%2F@c19bd3ff72215f235c080e3fe7a6375347850a4905a2cb1d5384f4809db74c4e