bics
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s broad behavior mostly fits an integration skill, and the CLI comes from an official npm package, but the core data flow is through Membrane as an intermediary rather than directly to official BICS APIs. Unpinned `@latest` execution, generic proxy capability, and the mismatched BICS docs link make the footprint broader and less trustworthy than a narrowly scoped BICS skill.
Confidence: 84%Severity: 56%
Audit Metadata