find-route

Warn

Audited by Socket on Oct 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the routing purpose and API usage are mostly coherent, and the Google/TfL/OSM data flows fit the task. However, the undocumented local updater and helper executable, especially the optional auto-update/apply behavior with no verifiable source or integrity details, create a disproportionate supply-chain risk for an otherwise simple route-finding skill.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Oct 27, 2026, 04:16 PM
Package URL
pkg:socket/skills-sh/hartreeworks%2Fskill--find-route%2Ffind-route%2F@f8187ea52aeb999c625e1bec444720ea69bcc51d