yourvpndead-vpn-detection

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s capabilities are internally aligned with its stated goal, but that goal is itself an offensive localhost vulnerability scanner that enables privacy-invasive discovery of VPN usage, exit IPs, and connection metadata from other apps. Supply-chain trust is weakened by publisher/repo inconsistency and optional prebuilt APK sideloading, though there is no direct evidence of credential theft or hidden exfiltration beyond the described scanning behavior.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:39 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Ftrending-skills%2Fyourvpndead-vpn-detection%2F@be6248628a14dcb946d571e7a251962d1063aa30037d021d200f790eb1acc636