lighthouse
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The install source appears legitimate, but the skill is internally inconsistent: it claims Google Lighthouse auditing while its actual capabilities target a project-management-style Lighthouse service. It also funnels authentication and action execution through Membrane rather than the named service, expanding trust and data exposure beyond what the title/description imply.
Confidence: 88%Severity: 66%
Audit Metadata