ip-attribution
Fail
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The ip-attribution skill presents a coherent and proportionate toolchain for mapping IPs to cloud providers, ASNs, and organizations using DNS, WHOIS, and public cloud IP ranges. There are no evident credential requirements or suspicious data flows; outputs align with the stated purpose. The primary security considerations relate to ensuring the cloud ranges data integrity (caching and potential tampering of public JSON feeds) and ensuring logs do not inadvertently expose sensitive IP metadata. Overall, the skill is benign with moderate risk due to external data fetches, but within expected bounds for a legitimate IP attribution utility.
Confidence: 98%
Audit Metadata