mhr-cfw-domain-fronting-relay

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s network-routing behavior matches its stated purpose, but that purpose is a censorship-bypass relay and its install path relies on an unrelated personal GitHub repo plus an optional third-party PyPI mirror trusted explicitly. Data flows are transparent rather than covert, but supply-chain trust is disproportionally weak for software that proxies all user traffic.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:38 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Ftrending-skills%2Fmhr-cfw-domain-fronting-relay%2F@c686e6d338140e7903f3c836a019702f1bd98303bcdbb1f503473bf07709f52a