skills/membranedev/application-skills/marketstack/Socket

marketstack

Warn

Audited by Socket on May 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent as a Membrane-based connector, but it is not a direct Marketstack integration. Its main risk is data-flow and credential mediation through Membrane rather than official Marketstack APIs; install trust is relatively low risk because the CLI comes from the official npm registry and appears vendor-aligned.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

May 9, 2026, 08:12 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmarketstack%2F@c22a337fbac2c9509c41818a33a642b11a03a3e5