talend

Warn

Audited by Socket on May 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The install path is relatively legitimate, but the core behavior is a third-party proxy pattern: a Talend skill that requires a Membrane account and routes authentication and all operations through Membrane instead of Talend's official APIs. That makes the skill's actual trust boundary broader than its stated purpose and creates meaningful credential/data-flow risk, even without clear evidence of malware.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
May 1, 2026, 03:49 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftalend%2F@df288683c579813268cb5b8b1c2e0897beccaad3
Security Audit — socket — talend