amara
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is mostly coherent with its stated Amara integration purpose and uses an official npm-distributed CLI, but it depends on Membrane as a credential-holding intermediary and proxy for all Amara access. That third-party routing and unpinned CLI install make the trust footprint broader than a direct Amara integration, though not clearly malicious.
Confidence: 86%Severity: 58%
Audit Metadata