parsioio

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities fit its stated Parsio integration purpose, and the CLI install source is a legitimate npm package rather than an unverifiable binary. However, all authentication and API traffic are intentionally mediated through Membrane, so credentials and data do not flow directly only to Parsio; this third-party proxy model is a medium-risk trust expansion and the main concern.

Confidence: 86%Severity: 57%
Audit Metadata
Analyzed At
Apr 28, 2026, 11:51 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fparsioio%2F@9824e2bd0d4ef357da42080e4cad161a40a7dabf
Security Audit — socket — parsioio