insightly

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is internally coherent for a Membrane-based Insightly integration, and the CLI install path appears vendor-consistent via npm. The main concern is architectural: credentials and CRM data are intentionally brokered through Membrane as a third-party intermediary instead of direct Insightly API use, which increases trust and data-flow risk but is disclosed rather than hidden.

Confidence: 84%Severity: 54%
Audit Metadata
Analyzed At
Apr 30, 2026, 10:37 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Finsightly%2F@c36c25b7f7cfd22c0665348d21b59329d89b3695
Security Audit — socket — insightly