tavily-key-generator-proxy

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its actual purpose is account farming and proxying pooled Tavily keys to bypass normal service limits, which is disproportionate to a typical API integration. The main risk comes from executing an unrelated third-party GitHub project, forwarding secrets to external CAPTCHA/email services, and routing all API traffic through a custom gateway that impersonates real Tavily key usage.

Confidence: 90%Severity: 90%
Audit Metadata
Analyzed At
Sep 12, 2026, 08:38 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Ftrending-skills%2Ftavily-key-generator-proxy%2F@4d06bcb7c9f54ae99a4494fcb6baeac7689c6e4632e213acb276907dc7e7b4f5
Security Audit — socket — tavily-key-generator-proxy