mautic
Warn
Audited by Socket on May 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose and capabilities mostly align, and the install source is an official npm package rather than a suspicious downloader. The main concern is data-flow integrity: all Mautic access and authentication are funneled through Membrane as a third-party intermediary, so users must trust external CLI software and server-side credential management instead of direct Mautic API access.
Confidence: 86%Severity: 52%
Audit Metadata