freebuff2api-openai-proxy
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill provides instructions for the user to manually retrieve authentication tokens by accessing sensitive local configuration files. It specifically targets
~/.config/manicode/credentials.json(Linux/macOS) andC:\Users\<username>\.config\manicode\credentials.json(Windows) to extractauthTokenvalues for the Freebuff service. - [EXTERNAL_DOWNLOADS]: The instructions rely on downloading and installing several unverified third-party resources. This includes a global NPM package (
npm i -g freebuff), a Git repository (https://github.com/Quorinex/Freebuff2API.git), and a Docker image (ghcr.io/quorinex/freebuff2api:latest). These sources are not associated with the skill author or any trusted organizations. - [COMMAND_EXECUTION]: The deployment and troubleshooting steps involve executing CLI tools and binaries from untrusted sources, including the
freebuffcommand and thefreebuff2apibinary. It also encourages running Docker containers with host-exposed ports and environment variables containing sensitive authentication tokens.
Audit Metadata