smarty
Warn
Audited by Socket on Apr 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The install path is relatively normal and same-ecosystem, but the skill has a major purpose mismatch around what 'Smarty' means and sends all app data/auth through Membrane as a third-party intermediary. This is not confirmed malware, but the documentation inconsistency plus intermediary data flow make the skill higher risk than a direct, clearly scoped official integration.
Confidence: 87%Severity: 57%
Audit Metadata