gangtise-kb

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/_client.py

No clear malicious behavior is present in this fragment. The principal security concern is disabled TLS certificate and hostname verification, which can expose credentials, access tokens, and request data to a network attacker. Query parameter construction also lacks URL encoding.

Confidence: 99%Severity: 78%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:33 PM
Package URL
pkg:socket/skills-sh/kirkluokun%2Fawesome-a-stock-openclawskills%2Fgangtise-kb%2F@11a7e546f831e607eaa14198ce3a6445367cf2f7970e6d0ea196b82933bb79c4