multi-wordcheck

Warn

Audited by Socket on Aug 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: 技能功能与内容审核目的基本相关,但实际数据流经第三方 RedFox API,且允许任意自定义网关接收文案与 API Key。再加上指导 Agent 持久化写入用户环境变量保存密钥,整体属于中高风险的第三方云检测技能,而非明显恶意。

Confidence: 89%Severity: 68%
Audit Metadata
Analyzed At
Aug 15, 2026, 09:47 AM
Package URL
pkg:socket/skills-sh/redfox-data%2Fredfox-community%2Fmulti-wordcheck%2F@8aaf6e3dbba69e1b288d7a7bee4680643f0d1313aa01a5b6c2396bd28cfb31ce
Security Audit — socket — multi-wordcheck