shadow-number
Provides a disposable phone number for OTP verification, enabling users to sign up on websites without revealing their real number.
Install this skill
or
94/100
Security score
The shadow-number skill was audited on Jun 7, 2026 and we found 6 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
low line 6
External URL reference
SourceSKILL.md
| 6 | SHADOW_API_URL=https://extraordinary-charisma-production.up.railway.app |
low line 50
External URL reference
SourceSKILL.md
| 50 | POST https://extraordinary-charisma-production.up.railway.app/api/smspva/buy |
low line 95
External URL reference
SourceSKILL.md
| 95 | GET https://extraordinary-charisma-production.up.railway.app/api/smspva/otp/{orderId} |
low line 131
External URL reference
SourceSKILL.md
| 131 | PUT https://extraordinary-charisma-production.up.railway.app/api/smspva/refuse/{orderId} |
low line 137
External URL reference
SourceSKILL.md
| 137 | PUT https://extraordinary-charisma-production.up.railway.app/api/smspva/ban/{orderId} |
low line 149
External URL reference
SourceSKILL.md
| 149 | 3. Open browser → navigate to `https://web.telegram.org` → start signup |
Scanned on Jun 7, 2026
View Security Dashboard