freebuff2api-openai-proxy

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's core behavior is coherent for a proxy, but it is a third-party man-in-the-middle for Freebuff/Codebuff traffic, asks users to extract auth tokens from a local credential store, and forwards those tokens plus prompts through non-official proxy code. Same-org public source lowers malware confidence, but supply-chain and credential-forwarding risks remain high enough for a suspicious classification.

Confidence: 89%Severity: 81%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:37 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Ftrending-skills%2Ffreebuff2api-openai-proxy%2F@ecf0f032cf42aed624cc2f2a85107755fc759432911ba0d54aae4db2608b42e4