local-search

Warn

Audited by Socket on Apr 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is local search, but the skill routes all Google Maps-style requests through a third-party proxy (stableenrich.dev) and relies on an unpinned external CLI (agentcash). That footprint is broader than necessary for simple place lookup and creates payment, privacy, and intermediary trust risk, though there is no direct evidence of malware or overt credential theft in the provided content.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Apr 19, 2026, 11:26 AM
Package URL
pkg:socket/skills-sh/Merit-Systems%2Fagentcash-skills%2Flocal-search%2F@2ecf6f88f1f7e68c16b53480eb15f2d6267b2a26