smarty

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is relatively normal and same-ecosystem, but the skill has a major purpose mismatch around what 'Smarty' means and sends all app data/auth through Membrane as a third-party intermediary. This is not confirmed malware, but the documentation inconsistency plus intermediary data flow make the skill higher risk than a direct, clearly scoped official integration.

Confidence: 87%Severity: 57%
Audit Metadata
Analyzed At
Apr 30, 2026, 05:39 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsmarty%2F@84655646697f1ca92bf093b86fb81ae5a618c1f5