senta

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core capability matches a Senta integration, and the CLI install source appears official, but the skill routes authentication and API traffic through Membrane rather than directly to Senta. Combined with the incorrect 'Official docs' link to an unrelated Baidu project, this creates meaningful trust and data-flow concerns without clear justification.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Apr 29, 2026, 07:42 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsenta%2F@e4140713f63099040d6cf3e258a4b5d8cbeccf8b
Security Audit — socket — senta