chmeetings
Warn
Audited by Socket on Apr 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities generally match its stated ChMeetings integration purpose, and the CLI install source is relatively trustworthy. The main concern is data-flow integrity: all access and credential handling are mediated by Membrane rather than going directly to ChMeetings, creating a third-party trust boundary for sensitive church/member data. Overall this looks coherent but medium-risk due to proxying, mutable CLI install, and impactful write operations.
Confidence: 87%Severity: 56%
Audit Metadata