parsioio
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's capabilities fit its stated Parsio integration purpose, and the CLI install source is a legitimate npm package rather than an unverifiable binary. However, all authentication and API traffic are intentionally mediated through Membrane, so credentials and data do not flow directly only to Parsio; this third-party proxy model is a medium-risk trust expansion and the main concern.
Confidence: 86%Severity: 57%
Audit Metadata