skills/xianmingyao/openclaw-cayson/doubao-chat/Socket

doubao-chat

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s stated purpose is simple chat access, but it achieves this by sending a browser-derived Doubao session credential and user prompts to an unofficial Vercel-hosted reverse-engineered proxy. The main risk is credential forwarding and data interception through a third-party intermediary rather than official Doubao APIs.

Confidence: 94%Severity: 86%

Audit Metadata

Analyzed At

Sep 19, 2026, 11:32 PM

Package URL

pkg:socket/skills-sh/xianmingyao%2Fopenclaw-cayson%2Fdoubao-chat%2F@d6460b3196470e7612602b61056fe58f25eb5ea5876a4597fdc3b981b4cbefbe