postgis-tiles
Warn
Audited by Socket on Jun 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the main issue is purpose-install mismatch. The skill claims to help with PostGIS tile serving but directs users to install a third-party npm package not published by the official PostGIS project. No direct malware or exfiltration is present, but the install guidance is misleading enough to create medium security and trust risk.
Confidence: 91%Severity: 64%
Audit Metadata