accelo

Warn

Audited by Socket on May 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose and capabilities mostly align, and the CLI comes from a plausible official npm source, but the trust boundary is expanded because all Accelo access is mediated by Membrane's third-party CLI and proxy rather than direct Accelo API calls. This is not clear evidence of malware, but it is a medium-risk integration pattern with supply-chain and intermediary data-flow concerns.

Confidence: 87%Severity: 54%
Audit Metadata
Analyzed At
May 2, 2026, 12:58 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Faccelo%2F@ec5a2f52a8df393de34bed5fdea901d40cd3f2b7
Security Audit — socket — accelo