api-ninjas

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as a Membrane-based integration, but its real footprint is broader than a normal API Ninjas skill because authentication, requests, and generated actions are mediated by Membrane rather than going directly to official API Ninjas endpoints. Install trust is reasonably good because the CLI comes from the official npm scope, but the third-party brokered data flow and extra account requirement make the skill medium risk.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Apr 28, 2026, 08:46 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fapi-ninjas%2F@2628c3a9b9438a4bb086038b0917bec4d1f11c91