skills/volcengine/openviking/github-proxy/Socket

github-proxy

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose matches proxy acceleration, but the skill’s core behavior is to route GitHub traffic through unrelated third-party domains rather than official GitHub endpoints. The main issue is inconsistent capability claims and intermediary data flow, not confirmed malware or credential theft.

Confidence: 89%Severity: 63%

Audit Metadata

Analyzed At

Sep 19, 2026, 06:33 AM

Package URL

pkg:socket/skills-sh/volcengine%2Fopenviking%2Fgithub-proxy%2F@66513f4db608400b7cf770137d716a45084b74d6cd271c542dd7ce16feef991b