facebook-profile

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and basic capability align, and there is no evident malware or installer abuse. However, it forwards credentials and Facebook lookup data to a third-party Frevana API rather than official Meta endpoints, and the overridable base URL can redirect that token to another host. With no public documentation for the exact endpoint and no script review, this is a medium-risk intermediary integration rather than a clearly benign direct API skill.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Jul 15, 2026, 03:40 PM
Package URL
pkg:socket/skills-sh/finpeakinc%2Ffrevana-skills%2Ffacebook-profile%2F@62ba2bd82ca1e598bcb66a17c28b2dcdee1c98389f425233c2258f509c9ceef1
Security Audit — socket — facebook-profile