looker

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly coherent as a Looker integration, and the CLI install path is from an official registry under the publisher's scope. However, all authentication and API traffic are funneled through Membrane as an intermediary, so credentials and Looker data do not flow directly to the official service; this third-party credential/data routing meaningfully raises security risk even though it matches the product design.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Apr 29, 2026, 03:22 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Flooker%2F@02da718c083e4bdfb73411677196ca3037e8ec1c
Security Audit — socket — looker