relavate
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose is plausible, but its actual footprint is a Membrane-mediated integration rather than a direct Relavate client. Install trust is moderate and mostly consistent with the publisher, but the main concern is data and auth routing through Membrane's proxy/service layer plus mutable CLI installs. This is not confirmed malware, but it carries meaningful third-party access and data-flow risk beyond a narrowly scoped Relavate-only skill.
Confidence: 84%Severity: 62%
Audit Metadata