optimoroute
Warn
Audited by Socket on Apr 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities generally match its OptimoRoute integration purpose, and the CLI install path is from the official npm registry. The main concern is data-flow integrity: authentication, credential refresh, and API traffic are intentionally mediated by Membrane rather than going directly to OptimoRoute, creating a third-party trust boundary that is broader than a typical direct API skill.
Confidence: 86%Severity: 58%
Audit Metadata