cliproxy-newapi-stack

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该 Skill 的能力与“给现有 CLIProxyAPI 增加 NewAPI 计费层”总体一致,没有明显伪装成无关用途的恶意数据流,也未见第三方拦截端点或隐蔽执行指令。但它会把本地 OAuth 凭据同步到远端 VPS,并依赖未展示源码的部署/充值脚本处理 SSH、数据库和密钥,整体应判为可疑偏高风险而非确认恶意。

Confidence: 82%Severity: 68%
Audit Metadata
Analyzed At
Aug 6, 2026, 12:37 AM
Package URL
pkg:socket/skills-sh/majiayu000%2Fspellbook%2Fcliproxy-newapi-stack%2F@97156be3a6f535bb3920348b9e2bd56ebb72f263a7ccfbbffdf5d577e886c239
Security Audit — socket — cliproxy-newapi-stack