local-places
Warn
Audited by Socket on Mar 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Overall, the skill/payload appears to be benign given its stated purpose as a local development proxy for Google Places data. The main security considerations are standard: protect the API key, ensure the local server is not exposed beyond localhost, and implement basic access controls and rate limiting if extended beyond local use. No suspicious download/install patterns or credential forwarding to third-party tools are evident in the fragment.
Confidence: 75%Severity: 75%
Audit Metadata