amara

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is mostly coherent with its stated Amara integration purpose and uses an official npm-distributed CLI, but it depends on Membrane as a credential-holding intermediary and proxy for all Amara access. That third-party routing and unpinned CLI install make the trust footprint broader than a direct Amara integration, though not clearly malicious.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Apr 29, 2026, 06:37 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Famara%2F@b0915dbfc00d1882e90efd8da0dcf0d1140533f5