radar
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the npm install path for Membrane CLI appears official and proportionate, so this is not malware-like distribution. However, the skill's actual footprint is inconsistent with a Radar-specific integration: it presents an implausibly broad generic app schema and sends all app traffic through Membrane's intermediary connection/proxy, giving a third party visibility into auth and data flows rather than using Radar's official API directly.
Confidence: 89%Severity: 61%
Audit Metadata