fanbox-agent

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS:技能目的与“FanBox 终端编排/定时”基本一致,但它将令牌和终端数据发送到由环境变量决定的控制面,并赋予代理跨窗口控制与定时自主执行能力。未见明确恶意载荷或安装型供应链行为,但数据流可信边界不清且自动化权限较强,整体属中高风险。

Confidence: 84%Severity: 69%
Audit Metadata
Analyzed At
Jul 30, 2026, 11:51 AM
Package URL
pkg:socket/skills-sh/alchaincyf%2Ffanbox%2Ffanbox-agent%2F@a086521ed87a93590f20565fdfff836bcf115cf7907f42d23eecdef954774e77
Security Audit — socket — fanbox-agent