bing-search

Warn

Audited by Socket on Jun 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose is coherent, but it sends Bing searches and authentication to Frevana as a proxy rather than to an official Bing API, and it permits host override via `FREVANA_API_BASE_URL`, which can redirect credentials and query data. No malicious payloads or dangerous installers are shown, but the intermediary data flow and credential forwarding make this medium risk.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Jun 26, 2026, 08:37 AM
Package URL
pkg:socket/skills-sh/FinpeakInc%2Ffrevana-skills%2Fbing-search%2F@12b64313bb5936c2b508af5b867e57df78824dc2ada06d028d454f7917faf635
Security Audit — socket — bing-search