gomtm-ipproxy

Warn

Audited by Socket on May 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is purpose-aligned but routes traffic through untrusted free public proxies and relies on mutable raw GitHub data with no integrity pinning. No direct malware, credential theft, or executable install is present, but the network/privacy risk is material and disproportionate for a minimally described skill.

Confidence: 90%Severity: 61%
Audit Metadata
Analyzed At
May 17, 2026, 11:41 AM
Package URL
pkg:socket/skills-sh/codeh007%2Fmtmskills%2Fgomtm-ipproxy%2F@509cc5df8f5389a5a5774d2236b3898dc056d392