stormglassio

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's basic function matches its description, and the CLI source appears publisher-consistent, but the real integration is with Membrane as a third-party gateway rather than directly with Stormglass. That intermediary routing of authentication, queries, and results is a meaningful data-flow and trust concern, making the skill moderately risky despite otherwise coherent setup instructions.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Apr 28, 2026, 10:55 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fstormglassio%2F@2abe7aacd10a4827b0f0e6fb161ba01e17386d63