meteomatics-weather-api
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is largely coherent for a Membrane-based Meteomatics integration and uses an official npm-distributed CLI, so it is not clearly malicious. However, all auth and API traffic are mediated by Membrane rather than going directly to Meteomatics, and the skill requires trusting an external CLI/platform with connection creation, credential handling, and proxied requests; that makes the footprint broader than a simple direct API integration and pushes the risk to medium.
Confidence: 87%Severity: 52%
Audit Metadata