starton

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s basic purpose is coherent, and the CLI comes from a normal registry source, but the actual integration path routes authentication and API traffic through Membrane rather than directly to Starton. Requiring a separate Membrane account and using a proxy for Starton data creates a third-party interception layer that is not clearly necessary for the stated purpose.

Confidence: 89%Severity: 68%
Audit Metadata
Analyzed At
Apr 29, 2026, 07:41 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fstarton%2F@3aa691d371e820395e543ad6e0911e363c23e934