Geocode Lookup

Forward/reverse geocoding and great-circle distance calculations.

Security Scan

The skill's claims (forward/reverse geocoding and distance calculations) match its simple instruction-only implementation; it calls a single external API and requests no credentials or installs.

Purpose & Capability

The name/description match the SKILL.md: all runtime instructions are about sending addresses/coordinates to an external geocoding API and computing distances. No unrelated binaries, env vars, or installs are requested.

Instruction Scope

The instructions explicitly send user-supplied addresses/coords to https://geocode.agentutil.net via POST requests — this is expected for a geocoding skill. The SKILL.md includes a privacy warning not to send private addresses. Because it transmits user data to an external service, users should be aware of network exposure and the operator's privacy claims.

Install Mechanism

Instruction-only skill with no install spec and no code files — nothing is written to disk or installed. Low install risk.

Credentials

The skill declares no required environment variables or credentials, which is proportional to a free-tier geocoding API. It mentions a paid tier using an 'x402 protocol (USDC on Base)' but provides no instructions to perform payments or require wallet credentials; users should be cautious if later asked to provide private keys or authorize payments.

Persistence & Privilege

always:false and no requests to modify agent or system configuration. The skill does not request persistent privileges or access to other skills' settings.

Assessment

This skill is internally consistent and lightweight, but it sends addresses/coordinates to an external service (https://geocode.agentutil.net). Before installing, verify you trust that domain and its privacy claims, avoid sending private or sensitive addresses, and be cautious if the skill later asks to perform or authorize payments (it mentions a paid tier via a crypto protocol but does not currently request credentials). If you need guaranteed privacy, consider a trusted provider or an offline/local geocoding implementation.

Address to coordinates (forward geocoding), coordinates to address (reverse geocoding), and Haversine distance calculations.

Data Handling

This skill sends addresses and coordinates to an external API. Do not send private addresses without explicit user consent. The service does not store or log input data beyond the immediate response.

Endpoints

Forward Geocode

curl -X POST https://geocode.agentutil.net/v1/forward \
  -H "Content-Type: application/json" \
  -d '{"address": "Auckland, New Zealand"}'

Optional: limit (1-5, default 1).

Reverse Geocode

curl -X POST https://geocode.agentutil.net/v1/reverse \
  -H "Content-Type: application/json" \
  -d '{"lat": -36.8485, "lon": 174.7633}'

Distance

curl -X POST https://geocode.agentutil.net/v1/distance \
  -H "Content-Type: application/json" \
  -d '{"from": {"address": "London, UK"}, "to": {"address": "New York, US"}, "unit": "km"}'

Units: km, mi, m, nm. Accepts {lat, lon} or {address} for both endpoints.

Response Format

{
  "results": [
    {"lat": -36.8485, "lon": 174.7633, "display_name": "Auckland, New Zealand", "type": "city"}
  ],
  "request_id": "abc-123",
  "service": "https://geocode.agentutil.net"
}

Pricing

• Free tier: 10 queries/day, no authentication required
• Paid tier: $0.001/query via x402 protocol (USDC on Base)

Privacy

No authentication required for free tier. No personal data collected. Rate limiting uses IP hashing only.