api-gateway

Warn

Audited by Socket on May 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's proxy behavior matches its stated purpose, and there is no installer or binary supply-chain red flag. However, it routes all API calls and a powerful gateway credential through Maton-controlled endpoints rather than official service APIs, creating meaningful third-party mediation, broad action scope, and centralized exposure across many connected services.

Confidence: 89%Severity: 64%
Audit Metadata
Analyzed At
May 14, 2026, 12:16 AM
Package URL
pkg:socket/skills-sh/CraftOS-dev%2FCraftBot%2Fapi-gateway%2F@d0d330f8de9dfc632e4b0aa6d62554d221245a63
Security Audit — socket — api-gateway