skills/membranedev/application-skills/rapidapi/Socket

rapidapi

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is broadly coherent for RapidAPI access, and the CLI comes from an official npm package, but the actual integration is mediated by Membrane rather than direct RapidAPI APIs. That creates a meaningful third-party trust and data-routing concern, amplified by mutable `@latest`/`npx` execution and server-side credential handling.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Apr 29, 2026, 06:39 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Frapidapi%2F@1ec13f602eadb8d8d142e80dfbf04ccf73fe9408