korean-transit-route

Warn

Audited by Socket on May 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The routing purpose is coherent and ODsay usage is official, but the skill unnecessarily routes geocoding through a non-official hosted proxy and reads raw credentials from a local secrets file. This is not clearly malicious, yet the third-party proxy hop and credential handling make the data flow riskier than a fully direct official-API integration.

Confidence: 89%Severity: 56%
Audit Metadata
Analyzed At
May 13, 2026, 08:31 AM
Package URL
pkg:socket/skills-sh/NomaDamas%2Fk-skill%2Fkorean-transit-route%2F@0d05c768a3c4bcab2dcaa70a1a37f585aca28621