local-search

Warn

Audited by Socket on Apr 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is local search, but the skill routes all Google Maps-style requests through a third-party proxy (stableenrich.dev) and relies on an unpinned external CLI (agentcash). That footprint is broader than necessary for simple place lookup and creates payment, privacy, and intermediary trust risk, though there is no direct evidence of malware or overt credential theft in the provided content.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Apr 19, 2026, 11:26 AM
Package URL
pkg:socket/skills-sh/Merit-Systems%2Fagentcash-skills%2Flocal-search%2F@2ecf6f88f1f7e68c16b53480eb15f2d6267b2a26
Security Audit — socket — local-search