eventee

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install source is mostly legitimate, but the skill's core design routes authentication and Eventee operations through Membrane rather than Eventee's official API, creating a third-party credential/data intermediary. The capability set fits the stated purpose, yet the trust and data-flow model is broader than necessary and should be treated as medium risk.

Confidence: 84%Severity: 64%
Audit Metadata
Analyzed At
May 1, 2026, 09:23 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Feventee%2F@f53ef0eba3b2e40eb4c8b88d00185d53ee48dbdc