skills/reason-machines/devtools-skills/cliproxyapi-cloudflare-stack/Socket

cliproxyapi-cloudflare-stack

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but its actual trust model is not. It asks the agent to install and trust an unverifiable third-party gateway/container, then feed it multiple provider API keys and email-verification data, with additional risk from publisher mismatch and unpinned latest downloads.

Confidence: 91%Severity: 90%

Audit Metadata

Analyzed At

Jul 30, 2026, 04:37 AM

Package URL

pkg:socket/skills-sh/Aradotso%2Fdevtools-skills%2Fcliproxyapi-cloudflare-stack%2F@1d04c62e26f30c4196b06ffdb53b0e8f09a3514898fda733310252d917c4ac98