talend
Warn
Audited by Socket on May 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The install path is relatively legitimate, but the core behavior is a third-party proxy pattern: a Talend skill that requires a Membrane account and routes authentication and all operations through Membrane instead of Talend's official APIs. That makes the skill's actual trust boundary broader than its stated purpose and creates meaningful credential/data-flow risk, even without clear evidence of malware.
Confidence: 89%Severity: 74%
Audit Metadata