meteomatics-weather-api

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is largely coherent for a Membrane-based Meteomatics integration and uses an official npm-distributed CLI, so it is not clearly malicious. However, all auth and API traffic are mediated by Membrane rather than going directly to Meteomatics, and the skill requires trusting an external CLI/platform with connection creation, credential handling, and proxied requests; that makes the footprint broader than a simple direct API integration and pushes the risk to medium.

Confidence: 87%Severity: 52%
Audit Metadata
Analyzed At
Apr 29, 2026, 01:02 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmeteomatics-weather-api%2F@f8f60f5c060b8d56856cb92c5e5ad6ece5189d36
Security Audit — socket — meteomatics-weather-api