akismet
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated purpose is Akismet integration, but its actual footprint centers on Membrane as an intermediary for install, auth, and action execution. The npm-installed CLI appears legitimate and same-ecosystem, so this is not strong malware evidence; however, routing credentials and Akismet data through a third-party platform instead of the official Akismet API creates a meaningful trust and data-flow risk.
Confidence: 88%Severity: 62%
Audit Metadata