skills/imhansiy/my-skills/cliproxyapi-manager-skill/Socket

cliproxyapi-manager-skill

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Security

Securityscripts/cliproxyapi_manager.py

MEDIUM

SecurityMEDIUM

scripts/cliproxyapi_manager.py

No clear malware or covert behavior is present. The client has a significant credential-disclosure hazard: an absolute URL supplied as the raw path bypasses the configured server URL, while the management Bearer key is still attached. Use only trusted paths and HTTPS, and consider rejecting absolute URLs before attaching credentials.

Confidence: 99%Severity: 72%

Audit Metadata

Analyzed At

Oct 12, 2026, 09:44 PM

Package URL

pkg:socket/skills-sh/imhansiy%2Fmy-skills%2Fcliproxyapi-manager-skill%2F@2a83a95dbb13a29f37d69d6edeb4d8284600db98dba4349c2994009a9757554f