radar

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the npm install path for Membrane CLI appears official and proportionate, so this is not malware-like distribution. However, the skill's actual footprint is inconsistent with a Radar-specific integration: it presents an implausibly broad generic app schema and sends all app traffic through Membrane's intermediary connection/proxy, giving a third party visibility into auth and data flows rather than using Radar's official API directly.

Confidence: 89%Severity: 61%
Audit Metadata
Analyzed At
Sep 16, 2026, 01:23 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fradar%2F@7f0297901d257d3d20a35260c9d82bec82cfdb9f925919021e39b16810c89fae
Security Audit — socket — radar