freebuff2api-openai-proxy

Warn

Audited by Socket on Apr 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent as a proxy, but its footprint is broader and riskier than a normal compatibility wrapper because it centralizes third-party auth tokens, intermediates all model traffic, supports optional further proxying, and includes fingerprint-mimicking behavior. Install provenance for the Quorinex project looks reasonably verifiable, so this is not confirmed malware, but the credential/data-flow design and evasion-oriented features make it high security risk.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
Apr 20, 2026, 12:57 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Ftrending-skills%2Ffreebuff2api-openai-proxy%2F@78b32838b2a9b402b40e732c7bc11dcde57735ae