matterport

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose is coherent, and installation comes from an official registry, so this is not outright malicious. However, it routes Matterport authentication and API traffic through Membrane rather than using Matterport's native direct API flow, creating a third-party credential and data mediation path that is broader than necessary and raises medium security concern.

Confidence: 87%Severity: 61%
Audit Metadata
Analyzed At
Apr 29, 2026, 04:54 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmatterport%2F@41d2afc730b1bca6d51d06d470181af9e0f6f6c4
Security Audit — socket — matterport