mautic

Warn

Audited by Socket on May 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and the install source is an official npm package rather than a suspicious downloader. The main concern is data-flow integrity: all Mautic access and authentication are funneled through Membrane as a third-party intermediary, so users must trust external CLI software and server-side credential management instead of direct Mautic API access.

Confidence: 86%Severity: 52%
Audit Metadata
Analyzed At
May 2, 2026, 03:50 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmautic%2F@7d193af92c98181c73e1617cd5abb41c6d529342
Security Audit — socket — mautic