loopify

Warn

Audited by Socket on May 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as a Membrane-based Loopify integration, and its CLI source appears same-org and registry-hosted. However, the core data flow routes Loopify authentication and API traffic through Membrane’s intermediary platform rather than directly to Loopify, creating medium-high trust and credential-handling risk.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
May 2, 2026, 03:23 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Floopify%2F@fa199d961e43dc6fb2f7e998a97c68daee439630