freebuff2api-openai-proxy
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's core behavior is coherent for a proxy, but it is a third-party man-in-the-middle for Freebuff/Codebuff traffic, asks users to extract auth tokens from a local credential store, and forwards those tokens plus prompts through non-official proxy code. Same-org public source lowers malware confidence, but supply-chain and credential-forwarding risks remain high enough for a suspicious classification.
Confidence: 89%Severity: 81%
Audit Metadata