mezmo

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's core function is coherent, and the CLI comes from an official, same-vendor source, but it routes Mezmo access through Membrane as a third-party intermediary rather than directly to Mezmo APIs. That makes the install trust acceptable but the data-flow model medium/high risk for credential and data exposure relative to the stated Mezmo integration purpose.

Confidence: 89%Severity: 62%
Audit Metadata
Analyzed At
Apr 29, 2026, 04:11 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmezmo%2F@347f51a6d5bced50abce4efa6bc823cb7e18f28b
Security Audit — socket — mezmo