function
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s actual footprint is not well aligned with its stated purpose. It uses a real third-party CLI, but the target service is poorly identified, the docs link is unrelated, credentials are funneled through Membrane, and proxy requests may be sent to arbitrary URLs. This is more consistent with a generic gateway wrapper than a well-scoped Function integration.
Confidence: 89%Severity: 72%
Audit Metadata