signal-sciences

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose is plausible, and the CLI source is relatively trustworthy, but the integration is not direct. It requires a separate Membrane account and routes authentication, API calls, and returned Signal Sciences data through Membrane-managed infrastructure, which is disproportionate to a normal first-party service integration and raises medium security risk.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Apr 29, 2026, 04:11 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsignal-sciences%2F@ed7cb0d9363c44ef810e3a39953922056f4ed9c4
Security Audit — socket — signal-sciences