t3-capacity

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/t3-capacity.mjs

This CLI reads local provider usage and account information and reports matching instances. It sends the stored Grok login bearer key to GROK_USAGE_URL when that environment variable is set, without validating the destination; an untrusted override can therefore expose the credential. The default destination is https://cli-chat-proxy.grok.com/v1/billing?format=credits. This is a security warning requiring review of the runtime environment; no other clear malicious behavior is evident.

Confidence: 96%Severity: 72%
Audit Metadata
Analyzed At
Oct 16, 2026, 12:45 PM
Package URL
pkg:socket/skills-sh/hcaiano%2Fskills%2Ft3-capacity%2F@56050c08d01590420c1a384692220edf7b6ce5623ddddab184146894385b9629