cronfree
Warn
Audited by Socket on Apr 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities mostly match its stated purpose, and the CLI install path appears official and publisher-aligned. The main concern is data-flow integrity: Cronfree authentication and API requests are routed through Membrane’s managed service/proxy rather than directly to Cronfree, which is proportionate for a Membrane integration but adds third-party credential and traffic mediation. Overall this is not malware, but it carries medium security risk due to delegated auth/proxy trust and unpinned CLI installation.
Confidence: 84%Severity: 52%
Audit Metadata