skills/membranedev/application-skills/mixpanel/Socket

mixpanel

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's stated purpose matches its capabilities, and the CLI install source appears legitimate, but all Mixpanel access is mediated through Membrane rather than directly to official Mixpanel endpoints. This third-party proxy/auth architecture is disclosed and may be intentional, yet it materially increases trust and data-flow risk beyond a direct Mixpanel integration.

Confidence: 87%Severity: 56%

Audit Metadata

Analyzed At

May 1, 2026, 05:10 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmixpanel%2F@2a58320753f81f5594818e55a687c3d06a6ff81b