optimoroute

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities generally match its OptimoRoute integration purpose, and the CLI install path is from the official npm registry. The main concern is data-flow integrity: authentication, credential refresh, and API traffic are intentionally mediated by Membrane rather than going directly to OptimoRoute, creating a third-party trust boundary that is broader than a typical direct API skill.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Apr 30, 2026, 04:51 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Foptimoroute%2F@30b223e5de23b138f9f46d0c1cb2036e3eeb9d0c