Claude Code Custom Model Proxy

• Analyzed: May 16, 2026, 2:16 PM
• Findings: 1
• Version: 1.0.0
• Hash: 1ff627739a71ee90b0f77712eaa627ccf5d99d128eceb34f60bf46598169abbe
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill implements a local proxy server to redirect Claude Code traffic to a third-party API aggregator (api.53hk.cn). The most significant indicator is a hardcoded, functional API key (sk-4194...) within 'scripts/claude_code_proxy.py', which is a major security risk and highly irregular. While the code performs its stated purpose of protocol translation, routing all user prompts through an unverified third-party endpoint with hardcoded credentials poses significant data privacy risks and potential for traffic interception.