google-autocomplete

Warn

Audited by Socket on Oct 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent in purpose, but it routes requests and credentials through a Frevana proxy rather than official upstream APIs, and the overrideable base URL can redirect tokens and query data to another host. No malware or installer abuse is evident, but the proxy-based credential/data flow creates medium risk.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Oct 6, 2026, 10:36 PM
Package URL
pkg:socket/skills-sh/finpeakinc%2Ffrevana-skills%2Fgoogle-autocomplete%2F@b3a160ff7f496c951e803a5963b9377790cd1e02e0815093536f81951239c4e6