fractel

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s general purpose matches FracTEL integration, and the CLI install source appears official, but the actual trust boundary is much broader than advertised. Instead of direct FracTEL API use, credentials and API traffic are routed through Membrane-managed connections and proxy requests, creating third-party credential forwarding and intermediary data access that are not strictly necessary for a FracTEL skill.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Apr 28, 2026, 07:40 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ffractel%2F@5286c9459260a8409b27a9d9a650469b8d90eb77
Security Audit — socket — fractel