media-proxy

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose matches its behavior, but it achieves that purpose by forcing all paid media traffic and agent credentials through GooseWorks-controlled proxy endpoints rather than official provider APIs. The main risk is intermediary credential and data exposure, not confirmed malware.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Jul 15, 2026, 09:42 AM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fmedia-proxy%2F@afe55bc4f0ed1ad2654b79c756d9daf8142737f4abc0b281aa544f0958ee1768
Security Audit — socket — media-proxy