cliproxy-integration

Warn

Audited by Socket on Oct 18, 2026

2 alerts found:

Anomalyx2
AnomalyLOW
scripts/onboard-keys.py

This is an API-key validation and configuration utility, not clearly malware. It has a significant credential-handling concern: the key filter accepts every nonempty line, and keys are sent to a user-configurable URL. Unescaped values can also corrupt or inject gateway configuration. Use only trusted key files and endpoint settings; correct the filtering condition and escape YAML values before use.

Confidence: 99%Severity: 63%
AnomalyLOW
references/08-credential-porting.md

The fragment describes a potentially legitimate credential migration workflow, but it enables recovery and reuse of stored secrets and sends them to a vendor endpoint for validation. Authorization is not established. No executable malware or obfuscation is present in the supplied text; the main concern is credential exposure and handling.

Confidence: 94%Severity: 64%
Audit Metadata
Analyzed At
Oct 18, 2026, 02:03 AM
Package URL
pkg:socket/skills-sh/cassandre60%2Fskills%2Fcliproxy-integration%2F@72893b228047b61c6d1e49a1614c7cd38eb5d5ab8d5e711e3c535ee276292135