kyvio

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is internally coherent for a Membrane-published Kyvio integration, and the CLI install path is reasonably trustworthy. However, the integration is not a direct Kyvio client: authentication, credential storage, and API traffic are brokered through Membrane, creating meaningful third-party credential and data-flow risk beyond what a plain Kyvio skill name implies.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Apr 29, 2026, 08:13 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fkyvio%2F@f8854c8ed58fca8e6ca0546f611697173f38a1f1