ns1

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly coherent for an NS1 integration, and its installer appears to come from an official publisher-aligned npm package rather than an opaque binary. However, it routes authentication and API traffic through Membrane as an intermediary, so credentials and operational data are not flowing directly to NS1; this added trust boundary and mutable CLI install make it medium risk rather than benign.

Confidence: 85%Severity: 51%
Audit Metadata
Analyzed At
Apr 29, 2026, 05:41 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fns1%2F@0ed6c47c59e4b02d76e2a6027084fbb7fe05bf7b
Security Audit — socket — ns1