markdown-proxy

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose is plausible, but its main behavior routes arbitrary user URLs through third-party proxy services, creating unnecessary data exposure, and its login-required-page claim conflicts with the supplied official Jina documentation. Feishu credential use may be legitimate, but the unverified script behavior plus transitive delegation to another skill and `npx` fallback tooling make the overall footprint medium-high risk rather than benign.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 19, 2026, 06:38 PM
Package URL
pkg:socket/skills-sh/lihanghang%2Fagent-daily-blog%2Fmarkdown-proxy%2F@543c06b448e5231cf66aa5e6b818058219d3e62f5b455b2f9dead44b2f7ceb28
Security Audit — socket — markdown-proxy