journey

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is mostly coherent and low-risk, but the skill has a meaningful trust and data-flow issue: it brokers all access through Membrane and contains a clear documentation mismatch by pointing Journey users to Tripadvisor docs. That inconsistency, combined with broad proxy-request capability and opaque intermediary routing, makes the skill internally inconsistent enough to treat as suspicious rather than benign.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
May 1, 2026, 09:13 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fjourney%2F@3e408aeee494eb2e4006f936655c2eb52aacdf1e
Security Audit — socket — journey