akismet

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose is Akismet integration, but its actual footprint centers on Membrane as an intermediary for install, auth, and action execution. The npm-installed CLI appears legitimate and same-ecosystem, so this is not strong malware evidence; however, routing credentials and Akismet data through a third-party platform instead of the official Akismet API creates a meaningful trust and data-flow risk.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
Apr 28, 2026, 07:38 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fakismet%2F@dedbbffb9365a867ce7986d78866175349db9679
Security Audit — socket — akismet